CVE-2021-28363

Advisory

Firefly-cli 0.0.10 updates its urllib3 dependency to version 1.26.4 from the earlier 1.26.2, in response to a security vulnerability.
https://github.com/afonsoc12/firefly-cli/commit/bcf967ccfe63e0e8f2750b2d534af5d5969a8ec7

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Commits
- [[2c6e5a9](https://github.com/afonsoc12/firefly-cli/commit/2c6e5a917135efd3b3f6e7cf6bae989457d9b0c1)]: CHANGELOG.md minor change (Afonso Costa)
- [[af01101](https://github.com/afonsoc12/firefly-cli/commit/af011015198de055f168dd471480d4a2424bab51)]: Switch xdg to pyxdg module (Darshit Shah) [#2](https://github.com/afonsoc12/firefly-cli/pull/2)
- [[1947848](https://github.com/afonsoc12/firefly-cli/commit/1947848e456845faf4ef87d0a7c6562bd4ebfaae)]: Ensure accounts and budget print valid JSON (Darshit Shah) [#5](https://github.com/afonsoc12/firefly-cli/pull/5)
- [[bcf967c](https://github.com/afonsoc12/firefly-cli/commit/bcf967ccfe63e0e8f2750b2d534af5d5969a8ec7)]: Bumped urllib3 version, due to a security vulnerability (Afonso Costa)
- [[7ba9286](https://github.com/afonsoc12/firefly-cli/commit/7ba9286e39bab3b4a22b130a3ee13ec9773e3c19)]: Disabled TravisCI and migrated to Github Actions (Afonso Costa)
- [[bfbda44](https://github.com/afonsoc12/firefly-cli/commit/bfbda44c0d9e5ec423739366f3581028762ad21b)]: Version changed to pep440-pre (Afonso Costa)
- [[ec66474](https://github.com/afonsoc12/firefly-cli/commit/ec66474202be8b99f370501bbcc079d47047b67e)]: Merge remote-tracking branch 'origin/main' into main (Afonso Costa)
- [[c711c89](https://github.com/afonsoc12/firefly-cli/commit/c711c899e95a1440b7f529a4c76243ffeb0a328c)]: Renamed modules (Afonso Costa)
- [[87c86f7](https://github.com/afonsoc12/firefly-cli/commit/87c86f73d1117f64cd8b86a6e8384f375f17a3bc)]: Removed colorama. (Afonso Costa)
- [[aa72bf1](https://github.com/afonsoc12/firefly-cli/commit/aa72bf10c8438ebfa47513f6aebe3eb50c2b3d85)]: Housekeeping (Afonso Costa)
- [[18fffef](https://github.com/afonsoc12/firefly-cli/commit/18fffef4049eec754ee51bbecb2af266d9128cd5)]: CHANGELOG.md for v0.0.10 (Afonso Costa)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28363