CVE-2021-28957

Advisory

Pm4py 2.2.4 updates its dependency 'lxml' to v4.6.3 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Fixed

* 816fb4ad
* fixed a bug in the Pandas case size filter (the constraints were not applied correctly).
* 40f142c4
* fixed a bug in the format_dataframe function (columns were duplicated if already existing with the same name).
* 00d1a7de
* reverted stream converter to old variant (in a slightly slower but safer way).

Removed

Deprecated

Changed

* 991a09d4
* introduce a time limit in the DFG playout.
* ae5d2a07
* return the state of the process tree along with the alignment for the process tree alignments.
* 8b77384f
* refactoring of the calculation of the fitness for Petri net alignments (scattered code).

Added

Other

* d58d34fd
* upgraded Dockerfile to Python 3.9
* 50114175
* resolved issue with the upcoming Python 3.10 release
* 89314905
* security issue in requirements

---

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28957