CVE-2022-31108

Advisory

Dash-extensions 0.1.8 updates its NPM dependency "mermaid" requirement to "^9.2.2" to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Changed

- Bump a number of npm packages to address security issues
- Change callback context of `BlockingCallbackTransform` callbacks to reflect the original trigger
- Add `priority` keyword argument for callbacks that makes it possible to select which callbacks take precedence, when multiple callbacks target the same output simultaneously using the `MultiplexerTransform`
- Add support for the unittest syntax [introduced with Dash 2.6](https://dash.plotly.com/testing)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31108