CVE-2022-3786

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

__________________

* bump pytest dependency version to ``>=7,<8`` (vulnerability fix)
* less strict dependency pinning to support python 3.11
* added python 3.11 tests (not yet supporting numba)
* disabled numerical stability tests due to missing numpy support for high precision 128-bit float on arm64 architecture

Resources

• https://pypi.org/project/multivar-horner
• https://pyup.io/changelogs/multivar-horner/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3786