CVE-2022-40023

Advisory

Meilisearch 0.19.2 updates its dependency 'mako' to v1.2.2 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

**Note:** ⚠️ ⚠️ ⚠️
This release replaces the [v0.19.2](https://github.com/meilisearch/meilisearch-python/releases/tag/v0.19.2), which should be a **minor** update instead of a **patch** update due to a Breaking Change

💥 Breaking changes
* API resource output as a class to utilize dot notation for attributes (513) ElamC
* `Document`, `Index`, and `Task` are now classes, and the attributes of these classes are now accessible via dot notation:
* `document.offset`, `document.limit`, `document.total`
* `task.uid`, `task.duration`, `task.status` ...

🚀 Enhancements
* Add pipenv install in the CONTRIBUTING guide (519) brunoocasali

Security
* Bump mako from 1.2.1 to 1.2.2 due to security issue (528)

🐛 Bug Fixes
* Add camel_converter to package dependencies (534) alallema

Thanks again to ElamC, alallema, brunoocasali! 🎉

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40023