CVE-2021-44906

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

Added

- Added `CycleBreaker` component, strategy contributed by TomaszRewak
- Added `CycleBreakerTransform` transform

Changed

- Add [location path name in `WebSocket` component default url](https://github.com/thedirtyfew/dash-extensions/pull/91) by 0x0ACB
- Improve `BlockingCallbackTransform` adding a [final callback invocation blocking ends](https://github.com/thedirtyfew/dash-extensions/pull/169) by TomaszRewak
- Bug when a single output of list type was used with `LogTransform` and `BlockingCallbackTransform` fixed by TomaszRewak
- Bug where an attempt was made to write to read-only properties in `hijack` utility function fixed by RafaelWO
- Remap of callback bindings in `DashProxy` post init to enable callback registration via the `before_first_request` hook (need for compatibility with the latest `pages` implementation)
- Updated various dependencies to address security vulnerabilities

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44906