CVE-2022-2309

Advisory

Mpd-parser 0.0.5 updates its dependency 'lxml' to v4.9.1 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Minor fixes and additions, trying to upload the build files from github directly.

What's Changed
* Fixing file locations and pylint errors by avishaycohen in https://github.com/avishaycohen/mpd-parser/pull/1
* Fixing file locations and pylint errors by avishaycohen in https://github.com/avishaycohen/mpd-parser/pull/2
* Fixing file locations and pylint errors by avishaycohen in https://github.com/avishaycohen/mpd-parser/pull/3
* Updated the information in the readme file by avishaycohen in https://github.com/avishaycohen/mpd-parser/pull/4
* Update readme by avishaycohen in https://github.com/avishaycohen/mpd-parser/pull/5
* Bug/empty float value by avishaycohen in https://github.com/avishaycohen/mpd-parser/pull/6
* Fix the security vuln and add pytest action by avishaycohen in https://github.com/avishaycohen/mpd-parser/pull/7
* fixed issue when manifest had no encoding declared by avishaycohen in https://github.com/avishaycohen/mpd-parser/pull/8

New Contributors
* avishaycohen made their first contribution in https://github.com/avishaycohen/mpd-parser/pull/1

**Full Changelog**: https://github.com/avishaycohen/mpd-parser/commits/v0.0.5

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2309