CVE-2023-32681

Advisory

Prometheus-pve-sd 2.5.18 updates its dependency 'requests' to v2.31.0 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Changelog

[v2.5.18](https://github.com/thegeeklab/prometheus-pve-sd/compare/v2.5.17...v2.5.18) (2023-05-29)

Bug Fixes

- **deps:** update dependency prometheus-client to v0.17.0 ([412](https://github.com/thegeeklab/prometheus-pve-sd/pull/412))
- **deps:** update dependency ruamel.yaml to v0.17.28 ([413](https://github.com/thegeeklab/prometheus-pve-sd/pull/413))
- **deps:** update dependency requests to v2.31.0 [security] ([411](https://github.com/thegeeklab/prometheus-pve-sd/pull/411))
- **deps:** update dependency requests to v2.30.0 ([404](https://github.com/thegeeklab/prometheus-pve-sd/pull/404))
- **deps:** update dependency ruamel.yaml to v0.17.26 ([399](https://github.com/thegeeklab/prometheus-pve-sd/pull/399))
- **deps:** update dependency requests to v2.29.0 ([397](https://github.com/thegeeklab/prometheus-pve-sd/pull/397))

CI Pipeline

- switch to new codecov uploader ([393](https://github.com/thegeeklab/prometheus-pve-sd/pull/393))

Features

- add node hostname info to discovery info logging ([388](https://github.com/thegeeklab/prometheus-pve-sd/pull/388))

Others

- remove poetry experimental.new-installer flag ([414](https://github.com/thegeeklab/prometheus-pve-sd/pull/414))
- **deps:** lock file maintenance ([415](https://github.com/thegeeklab/prometheus-pve-sd/pull/415))
- **deps:** lock file maintenance ([409](https://github.com/thegeeklab/prometheus-pve-sd/pull/409))
- **deps:** update devdeps non-major ([408](https://github.com/thegeeklab/prometheus-pve-sd/pull/408))
- **deps:** lock file maintenance ([382](https://github.com/thegeeklab/prometheus-pve-sd/pull/382))
- **deps:** update dependency ruff to v0.0.259
- **deps:** update dependency pytest to v7.3.1
- **deps:** update dependency ruff to v0.0.265
- **deps:** update dependency thegeeklab/hugo-geekdoc to v0.39.1
- **deps:** update dependency thegeeklab/hugo-geekdoc to v0.38.1
- **deps:** update devdeps non-major
- **deps:** update dependency ruff to v0.0.263
- **deps:** update devdeps non-major
- **deps:** update dependency thegeeklab/hugo-geekdoc to v0.39.0
- **docker:** update python:3.11-alpine docker digest to 2f2dadb
- **docker:** update python:3.11-alpine docker digest to 06a3f7b
- **docker:** update python:3.11-alpine docker digest to 507818d
- **docker:** update python:3.11-alpine docker digest to 5405826
- **docker:** update python:3.11-alpine docker digest to 4b4078a
- **docker:** update python:3.11-alpine docker digest to e8cd6ca
- **docker:** update python:3.11-alpine docker digest to 7210235
- **docker:** update python:3.11-alpine docker digest to 8af856d
- **docker:** update python:3.11-alpine docker digest to 4e8e9a5
- **docker:** update python:3.11-alpine docker digest to 506eed4

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681