CVE-2020-7212

Advisory

Khorosjx 3.0.0 updates its dependency "urllib3" to v1.26.6 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

******
**Release Date: 2021-09-20**

Added
=====

General
-------
* Added the ``codeql-analysis.yml`` workflow.
* Merged dependabot pull requests to mitigate security vulnerabilities with
:py:mod:`twine` dependency packages.

Changed
=======

General
-------
* Started over with the ``requirements.txt`` file and renamed the original file
to be ``original-requirements.txt``.
* Added the ``install_requires`` configuration to the ``setup.py`` file.
* Added Python version 3.9 to ``pythonpackage.yml``.

Fixed
=====

General
-------
* Fixed a minor grammatical error in the ``examples/khorosjx_helper.yml`` file.

|

******

Resources

• https://pypi.org/project/khorosjx
• https://pyup.io/changelogs/khorosjx/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7212