CVE-2018-18074

Advisory

Json2xml version 3.0.0 updates its dependency "requests" minimum requirement to v2.20.0 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

===================

* Fix/coveralls (43)
* update coverage report (42)
* Merge pull request 41 from vinitkumar/fix/coveralls
* add python coveralls
* Merge pull request 40 from vinitkumar/refactor/cookiecutter
* update coverage
* add image for coveralls
* coverage and coveralls integrations
* try and trigger coveralls too
* fix code block in readme
* add doc about custom wrapper
* try at reducing the dependencies
* add tests for custom wrappers as well
* add tests for actualy dict2xml conversion
* fix: remove missing import
* fix: code syntax highlight in the readme again
* fix: code syntax highlight in the readme again
* fix: code syntax highlight in the readme
* chore: update readme with code samples
* test: add testcases for the different utils method
* remove unused imports
* check the third method for generating dict from json string too
* run correct test files
* fix tests
* update requirements and setuptools
* refactor the module into more maintainable code
* chore: add boilerplate
* remove all legacy
* Fix/cleanup (38)
* cleanup: remove unused modules (37)
* Merge pull request 35 from vinitkumar/improve-structure
* cleanup
* one again try to get the build working
* travis need full version for latest supported python
* do not hardcode version in a series
* update grammar
* fix conflicts
* Update LICENSE
* cleanup readme
* remove cli
* some cleanup and update the tests
* Update readme.md
* Cleanup Readme.md
* Update issue templates
* fix vulnerabilities in requests

Resources

• https://pypi.org/project/json2xml
• https://pyup.io/changelogs/json2xml/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18074