CVE-2020-10735

Advisory

Aleph-message 0.3.1 updates its dependency ''pydantic' requirement to versions '~=1.10.5' to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* Fix: Dependencies were outdated, contain vulnerabilities by hoh in https://github.com/aleph-im/aleph-message/pull/42
* Small code fixes by hoh in https://github.com/aleph-im/aleph-message/pull/43
* Fix: README was obsolete and example did not work by hoh in https://github.com/aleph-im/aleph-message/pull/44
* Fix: allow None in message signature field by odesenfans in https://github.com/aleph-im/aleph-message/pull/39
* Chore: Update requirements.txt by hoh in https://github.com/aleph-im/aleph-message/pull/46
* Fix: Message status had no model representation. by hoh in https://github.com/aleph-im/aleph-message/pull/45


**Full Changelog**: https://github.com/aleph-im/aleph-message/compare/0.3.0...0.3.1

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735