CVE-2022-21187

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

Security

- Update libvcs 0.11.0 -> 0.11.1 to patch mercurial URL injection
vulnerability with URLs ([info](https://github.com/vcs-python/libvcs/pull/306))

Development

- Run pyupgrade formatting (353)
- Tests: Move from pytest `tmp_dir` (`py.path.local`) to `tmp_path`
(`pathlib.Path`)

Documentation

- Move to furo theme
- Root: `make start_docs`, `make design_docs`
- docs/: `make start`, `make design`

Resources

• https://pypi.org/project/vcspull
• https://pyup.io/changelogs/vcspull/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21187