CVE-2020-28975

Advisory

Labelme2datasets version 0.0.3 has upgraded its dependency scikit-learn from at least version 0.24.2 to at least version 1.4.2. This update was made in response to the security vulnerability identified in CVE-2020-28975.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* update dependencies and solve security alert by veraposeidon in https://github.com/veraposeidon/labelme2Datasets/pull/9
* Update setup.py by veraposeidon in https://github.com/veraposeidon/labelme2Datasets/pull/10

New Contributors
* veraposeidon made their first contribution in https://github.com/veraposeidon/labelme2Datasets/pull/9

**Full Changelog**: https://github.com/veraposeidon/labelme2Datasets/compare/v0.0.2...v0.0.3

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28975
• https://github.com/veraposeidon/labelme2Datasets/pull/9/files#diff-4d7c51b1efe9043e44439a949dfd92e5827321b34082903477fd04876edb7552R5