CVE-2022-22816

Advisory

Watchui 2.0.1 updates its dependency 'pillow' to v9.0.0 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

WatchUI ver2.0.1

Breaking changes

WatchUI 2.0 brings breaking changes. Dev team decided to streamline the library and focus it solely on the image and text comparison. This allows us to remove the implicit dependency on browser automation libraries - namely SeleniumLibrary, which was implicit part of the library via RF BuiltIn() import of the SeleniumLibrary instance.

This is no longer the case - user of the WatchUI therefore can and have to choose, what UI automation library will use and provide screenshots to the WatchUI keywords to be compared. It could be now used with SeleniumLibrary, Browser library, Sikuli, Appium or any other UI library where visual validation is required.

Version 1.x.x is no longer supported, but it is still available on [Pypi](pip install WatchUI==1.0.11).


- Completly description 84
- Add some security 88

Resources

• https://pypi.org/project/watchui
• https://pyup.io/changelogs/watchui/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22816