CVE-2020-10377

Advisory

Hippogym 1.1.0 updates its dependency 'pillow' to v7.1.0 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* actually add TAMER and COACH code by NickNissen in https://github.com/IRLL/HIPPO_Gym/pull/16
* update PILLOW version to 7.1.0 following security vulnerability notif… by NickNissen in https://github.com/IRLL/HIPPO_Gym/pull/17
* add ability to set useAWS to false in config.yml by NickNissen in https://github.com/IRLL/HIPPO_Gym/pull/18
* Bump pyyaml from 5.3.1 to 5.4 by dependabot in https://github.com/IRLL/HIPPO_Gym/pull/21
* Bump pillow from 7.1.0 to 8.1.1 by dependabot in https://github.com/IRLL/HIPPO_Gym/pull/20
* add .DS_Store to gitignore by konantian in https://github.com/IRLL/HIPPO_Gym/pull/22
* Bump websockets from 8.1 to 9.1 by dependabot in https://github.com/IRLL/HIPPO_Gym/pull/25
* Bump pillow from 8.1.1 to 8.2.0 by dependabot in https://github.com/IRLL/HIPPO_Gym/pull/24
* Bump pillow from 8.2.0 to 9.0.1 by dependabot in https://github.com/IRLL/HIPPO_Gym/pull/30
* Bump numpy from 1.18.5 to 1.22.0 by dependabot in https://github.com/IRLL/HIPPO_Gym/pull/37

New Contributors
* dependabot made their first contribution in https://github.com/IRLL/HIPPO_Gym/pull/21
* konantian made their first contribution in https://github.com/IRLL/HIPPO_Gym/pull/22

**Full Changelog**: https://github.com/IRLL/HIPPO_Gym/compare/v1.0.0...v1.1.0

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10377