CVE-2022-40897

Advisory

Labelme2datasets version 0.0.3 has upgraded its dependency from setuptools at least version 58.0.4 to at least version 69.5.1. This update was made in response to the security vulnerability identified in CVE-2022-40897.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* update dependencies and solve security alert by veraposeidon in https://github.com/veraposeidon/labelme2Datasets/pull/9
* Update setup.py by veraposeidon in https://github.com/veraposeidon/labelme2Datasets/pull/10

New Contributors
* veraposeidon made their first contribution in https://github.com/veraposeidon/labelme2Datasets/pull/9

**Full Changelog**: https://github.com/veraposeidon/labelme2Datasets/compare/v0.0.2...v0.0.3

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40897
• https://github.com/veraposeidon/labelme2Datasets/pull/9/files#diff-4d7c51b1efe9043e44439a949dfd92e5827321b34082903477fd04876edb7552R7