CVE-2022-2309

Advisory

Falocalrepo-server 3.2.7 updates its dependency ' lxml' to versions '^4.9.1' to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Dependencies

* Use [lxml ^4.9.1](https://pypi.org/project/lxml/4.9.1)
* Fix [CVE-2022-2309](https://cve.report/CVE-2022-2309.pdf) issue
* Use [falocalrepo-database ~5.3.7](https://pypi.org/project/falocalrepo-database/5.3.7)
* Use [uvicorn ^0.18.2](https://pypi.org/project/uvicorn/0.18.2)
* Use [chardet ^5.0.0](https://pypi.org/project/chardet/5.0.0)
* Use [Pillow ^9.2.0](https://pypi.org/project/Pillow/9.2.0)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2309