CVE-2023-2650

Advisory

Libre-fastapi-jwt 0.20.3 updates its dependency 'cryptography' to version '41.0.1' to include a security fix.
https://github.com/LibreNZ/libre-fastapi-jwt/commit/fa128ea36cf021e104f564d3c7bc3874f83461fe

Affected package

Affected versions

Fixed versions

Vulnerability changelog

* Renamed package in order to publish it in pypi
* Scanned code with CodeQL and addressed all security issues found
* Updated all dependencies as identified by dependabot
* Merged all (to this date) pull request originally opened to the original author
* Added missing tests for functionality added on the above PRs

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650