CVE-2023-2251

Advisory

Ibm-generative-ai version 1.0.1 has upgraded its yaml dependency to "^2.3.0" from the prior "^2.2.2" to address the security issue identified as CVE-2023-2251.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* chore(workflows): change test matrix and remove unnecessary build by pilartomas in https://github.com/IBM/ibm-generative-ai-node-sdk/pull/6
* chore(dependency): upgrade yaml dependency due to found vulnerability by pilartomas in https://github.com/IBM/ibm-generative-ai-node-sdk/pull/7
* chore(docs): remove slack application info by pilartomas in https://github.com/IBM/ibm-generative-ai-node-sdk/pull/8
* chore(tests): migrate selected e2e test to integration by pilartomas in https://github.com/IBM/ibm-generative-ai-node-sdk/pull/11
* feat(client): add callback support for all methods by Tomas2D in https://github.com/IBM/ibm-generative-ai-node-sdk/pull/9
* fix(timeout): handle negative timeouts by Tomas2D in https://github.com/IBM/ibm-generative-ai-node-sdk/pull/13
* feat(release): v1.0.1 by pilartomas in https://github.com/IBM/ibm-generative-ai-node-sdk/pull/14

New Contributors
* Tomas2D made their first contribution in https://github.com/IBM/ibm-generative-ai-node-sdk/pull/9

**Full Changelog**: https://github.com/IBM/ibm-generative-ai-node-sdk/compare/v1.0.0...v1.0.1

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2251