CVE-2019-11324

Advisory

Fastapi 0.18.0 updates its dependency 'urllib3' to v1.24.2 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

* Add docs for <a href="https://fastapi.tiangolo.com/tutorial/security/http-basic-auth/" target="_blank">HTTP Basic Auth</a>. PR <a href="https://github.com/tiangolo/fastapi/pull/177" target="_blank">177</a>.

* Upgrade HTTP Basic Auth handling with automatic headers (automatic browser login prompt). PR <a href="https://github.com/tiangolo/fastapi/pull/175" target="_blank">175</a>.

* Update dependencies for security. PR <a href="https://github.com/tiangolo/fastapi/pull/174" target="_blank">174</a>.

* Add docs for <a href="https://fastapi.tiangolo.com/tutorial/middleware/" target="_blank">Middleware</a>. PR <a href="https://github.com/tiangolo/fastapi/pull/173" target="_blank">173</a>.

Resources

• https://pypi.org/project/fastapi
• https://pyup.io/changelogs/fastapi/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11324