CVE-2021-28957

Advisory

C2cwsgiutils 4.1.2 updates its dependency 'lxml' to v4.6.3 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Changed
- [27f1d0](https://github.com/camptocamp/c2cwsgiutils/commit/27f1d0332f104a865cb83ec0bc5f695d8987a4b4) - **Do the release 4.1.1** - [sbrunner](https://github.com/sbrunner)
- [969](https://github.com/camptocamp/c2cwsgiutils/pull/969) - **Mark the package as typed** - [sbrunner](https://github.com/sbrunner)
- [951](https://github.com/camptocamp/c2cwsgiutils/pull/951) - **[Backport release_4] Bump c2cciutils from 1.1.dev20210427101151 to 1.1.dev20210428132049** - [c2c-bot-gis-ci](https://github.com/c2c-bot-gis-ci)
- [917](https://github.com/camptocamp/c2cwsgiutils/pull/917) - **[Backport release_4] Retry the query on elastic search** - [c2c-bot-gis-ci](https://github.com/c2c-bot-gis-ci)
- [890](https://github.com/camptocamp/c2cwsgiutils/pull/890) - **Make the broadcast decorator more generic** - [sbrunner](https://github.com/sbrunner)
- [856](https://github.com/camptocamp/c2cwsgiutils/pull/856) - **Document some v4 breaking changes** - [gberaudo](https://github.com/gberaudo)

Fixed
- [963](https://github.com/camptocamp/c2cwsgiutils/pull/963) - **dependencies against security issues** - [sbrunner](https://github.com/sbrunner)
- [957](https://github.com/camptocamp/c2cwsgiutils/pull/957) - **dependencies against security issues** - [sbrunner](https://github.com/sbrunner)
- [2efd3a](https://github.com/camptocamp/c2cwsgiutils/commit/2efd3a13d17b276f5a12d70d29b5e34ede67b183) - **check ES** - [sbrunner](https://github.com/sbrunner)
- [891](https://github.com/camptocamp/c2cwsgiutils/pull/891) - **for elasticsearch version 7.x** - [sbrunner](https://github.com/sbrunner)

Generated by [Automation](https://github.com/aeon-php/automation)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28957