CVE-2023-32681

Advisory

Faapi 3.11.0 updates its dependency 'requests' minimum requirement to 2.31.0 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

New Features

* Session class for requests can be customized with new `session_class` argument for `FAAPI`

Changes

* Remove [cfscrape](https://pypi.org/project/cfscrape) dependency
* Was not updated in years and all requests succeeded with a normal `requests.Session` object

Dependencies

* Use [requests ^2.31.0](https://pypi.org/project/requests/2.31.0)
* Fix [CVE-2023-32681](https://cve.report/CVE-2022-42969) issue
* Use [beautifulsoup4 ^4.12.2](https://pypi.org/project/beautifulsoup4/4.12.2)
* Use [lxml ^4.9.2](https://pypi.org/project/lxml/4.9.2)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681