CVE-2019-6446

Advisory

Fhir-pyrate 0.2.0 requires 'numpy' versions '^1.22' to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Much has changed! Some parameters names have been deprecated and others have been added, below there is a summary of all the pull requests.
The most important changes are:
- Some fuctions have been added to avoid using `query_to_dataframe`.
- Bundle caching
- If multiple resources are queried, a dictionary with multiple DataFrames is returned.
- Read operations are now supported

What's Changed
* Update to 3.8 because of numpy security update by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/64
* Convert basic bundle collection to generator by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/60
* Add history support by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/74
* Add handling for dataframe functions using the _id parameter by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/72
* Fix the FHIR server URL bug for local servers by introducing a new variable that contains the domain by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/78
* Allow to specify multiple query arguments in df contraints by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/76
* Specify Package Version Inside Package by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/80
* Allow to turn off checks for dicom download by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/85
* Add resource name to the TQDM description by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/88
* Merge trade rows for dataframe and trade rows for dataframe with ref by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/89
* Allow addition of any column to the trade rows for dataframe result by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/90
* Convert logging.warn to warnings when appropriate by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/105
* Convert received resources from read operations to bundles for consistency by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/106
* Smarter bundle caching by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/107
* Make current beta compatible with 0.1.0 by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/112
* Fix efficiency problem with merge on by returning dataframes giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/113
* Make fhirpathpy import greedy by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/116
* Support for custom certificates needed by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/119
* Improve documentation by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/122


**Full Changelog**: https://github.com/UMEssen/FHIR-PYrate/compare/v0.1.0...v0.2.0

Resources

• https://pypi.org/project/fhir-pyrate
• https://pyup.io/changelogs/fhir-pyrate/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6446