CVE-2022-24439

Advisory

Pytorch-ie 0.13.0 updates its dependency 'gitpython' to v3.1.30 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

* simplify hf_hub_mixin (257) ArneBinder
* streamline dataset builder (252) ArneBinder
* more informative assert log messages (240) leonhardhennig

:boom: Breaking Changes

* remove the datamodule (250) ArneBinder

:rocket: Features

* improve RE taskmodule speed (247) ArneBinder
* backwards compatible prepare() logic improvements (248) ArneBinder
* show_progress for taskmodule.encode() (242) ArneBinder

:beetle: Fixes

* use TypeAlias in all taskmodules (255) ArneBinder
* fix typing in RE taskmodule (254) ArneBinder
* update GitPython to fix vulnerability (251) ArneBinder
* Update dependencies new (245) ArneBinder

:books: Documentation

* reference the template in the readme (249) ArneBinder

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24439