CVE-2021-29510

Advisory

Diffsync 1.4.0 updates its dependency 'pydantic' minimum version to v1.7.4 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Added

- 53 - Add a new example based on pynautobot and Nautobot REST API
- 59 - Add proper documentation published in Read the doc
- 68 - Cleanup Readme, add link to new documentation site
- 70 - Add `add_or_update()` method to DiffSync class that requires a DiffSyncModel to be passed in and will attempt to add or update an existing object
- 72 - Add core engine section in docs and rename example directories
- 75 - Add support for Structlog v21 in addition to v20.
- 80 - Add support for an existing Diff object to be passed to `sync_to()` & `sync_from()` to prevent another diff from being calculated.
- 81 - Add a new example based on PeeringDB
- 83 - Add support for Python 3.10
- 87 - Add new model flags : `SKIP_UNMATCHED_BOTH`, `SKIP_UNMATCHED_SRC` & `SKIP_UNMATCHED_DST` to match the behavior of the global flags

Changed

- 62 - Update CI Token
- 69 - Replace Travis CI with Github Actions to run unit tests
- 82 - Update lock file with latest versions.
- 90 - Convert list of actions (`create`, `update`, `delete`) to proper Enum

Fixed

- 51 - Update minimum Pydantic version due to security advisory GHSA-5jqp-qgf6-3pvh
- 63 - Fix type in Readme

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29510