CVE-2020-28493

Advisory

Line-item-manager 0.2.2 updates its dependency 'jinja2' to v2.11.3 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

-------------------

* Support reportableType settings for CustomTargetingKey (55)
* Support for advertisers of different types (48)
* BUG FIX: Custom targeting hb_bidder contains all key-values (43)
* Upgrade jinja2 to 2.11.3 due to security vulnerabilities (51)
* Upgrade PyYAML due to security vulnerabilities (56)
* Remove requirements_dev.txt; not needed and introducing CVEs (58)

Resources

• https://pypi.org/project/line-item-manager
• https://pyup.io/changelogs/line-item-manager/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28493