CVE-2023-32681

Advisory

Docker-tidy 1.1.34 updates its dependency 'requests' to v2.31.0 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Changelog

[v1.1.34](https://github.com/thegeeklab/docker-tidy/compare/v1.1.33...v1.1.34) (2023-05-29)

Bug Fixes

- **deps:** update dependency ruamel.yaml to v0.17.28 ([529](https://github.com/thegeeklab/docker-tidy/pull/529))
- **deps:** update dependency websocket_client to v1.5.2 ([526](https://github.com/thegeeklab/docker-tidy/pull/526))
- **deps:** update dependency requests to v2.31.0 [security] ([528](https://github.com/thegeeklab/docker-tidy/pull/528))
- **deps:** update dependency certifi to v2023 ([520](https://github.com/thegeeklab/docker-tidy/pull/520))
- **deps:** update dependency docker to v6.1.2 ([519](https://github.com/thegeeklab/docker-tidy/pull/519))
- **deps:** update dependency requests to v2.30.0 ([518](https://github.com/thegeeklab/docker-tidy/pull/518))
- **deps:** update dependency ruamel.yaml to v0.17.26 ([513](https://github.com/thegeeklab/docker-tidy/pull/513))
- **deps:** update dependency requests to v2.29.0 ([511](https://github.com/thegeeklab/docker-tidy/pull/511))

CI Pipeline

- switch to new codecov uploader ([508](https://github.com/thegeeklab/docker-tidy/pull/508))

Others

- remove poetry experimental.new-installer flag ([530](https://github.com/thegeeklab/docker-tidy/pull/530))
- **deps:** update dependency thegeeklab/hugo-geekdoc to v0.38.1
- **deps:** lock file maintenance ([525](https://github.com/thegeeklab/docker-tidy/pull/525))
- **deps:** update devdeps non-major ([524](https://github.com/thegeeklab/docker-tidy/pull/524))
- **deps:** lock file maintenance ([506](https://github.com/thegeeklab/docker-tidy/pull/506))
- **deps:** lock file maintenance ([531](https://github.com/thegeeklab/docker-tidy/pull/531))
- **deps:** update dependency thegeeklab/hugo-geekdoc to v0.39.0
- **deps:** update dependency ruff to v0.0.265
- **deps:** update dependency thegeeklab/hugo-geekdoc to v0.39.1
- **deps:** update devdeps non-major
- **deps:** update dependency pytest to v7.3.1
- **deps:** update dependency ruff to v0.0.263
- **deps:** update devdeps non-major
- **docker:** update python:3.11-alpine docker digest to 4e8e9a5
- **docker:** update python:3.11-alpine docker digest to 06a3f7b
- **docker:** update python:3.11-alpine docker digest to 7210235
- **docker:** update python:3.11-alpine docker digest to 507818d
- **docker:** update python:3.11-alpine docker digest to 5405826
- **docker:** update python:3.11-alpine docker digest to 4b4078a
- **docker:** update python:3.11-alpine docker digest to 4d53bc4
- **docker:** update python:3.11-alpine docker digest to 2f2dadb

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681