CVE-2021-45958

Advisory

Mlrun 1.0.4rc1 updates its dependency 'Fastapi' to v0.78.0 to fix a transitive vulnerability related to 'ujson'.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Features / Enhancements
* **Spark**: Allow mounting v3io on driver but not executors, Hedingber
* **Requirements**: Add vulnerability check to CI and fix vulnerabilities, Hedingber
* **UI**: [Features & enhancement](https://github.com/mlrun/ui/releases/tag/v1.0.4-rc1#features-and-enhancements)

Bug fixes
* **Images**: Fix GPU image to have new signing keys, Hedingber
* **UI**: [Bug fixes](https://github.com/mlrun/ui/releases/tag/v1.0.4-rc1#bug-fixes)


Pull requests:
1a3ceefd [Images] Fix GPU image to have new signing keys (2030)
f0e2d71c [Spark] Allow mounting v3io on driver but not executors [Backport 1.0.x] (2023)
b2879242 [Requirements] Add vulnerability check to CI and fix vulnerabilities [Backport 1.0.x] (2028)


unstable
Latest unstable release
- Git sha a527fbba0b551fe4c95cca5c0868787020c22b69
- Updated at 2022-06-10T01:03:21+03:00

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45958