CVE-2020-26137

Advisory

Parsons 0.17.2 updates its dependency 'urllib3' to v1.26.5 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

**Enhancements**:
- Adds `get_survey_question()` and `update_survey_question()` to ActionKit (h/t crayolakat)
- Adds Google Cloud Storage as an option for the Cloud Storage Utility & VAN (h/t jburchard)
- Updates statupdate and compupdate copy options for Redshift (h/t dannyboy15)

**Fixes / Improvements**:
- Cleans up leaky logs (h/t ydamit)
- Fixes for GET request params & Tag ID's in Hustle (h/t ChrisC)
- Uses Python floats as a Redshift default (h/t ydamit)
- Adds typecast param to `insert_record()` for Airtable (h/t thebbennett)
- Fixes van connector for NGPVAN API update (h/t bxjw & Bella)
- Updates urllib3 security vulnerability (h/t ChrisC)

**Documentation**:
- Adds updated NGPVAN API documentation URLs to repo docs (h/t djs-djs)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26137