CVE-2023-32681

Advisory

Neo-fairy-client 3.4.0.2 updates its dependency 'requests' to v2.31.0 to include a security fix.
https://github.com/Hecate2/neo-fairy-client/commit/4b84cf63095a6d92b42be41eb88485043e6cc019

Affected package

Affected versions

Fixed versions

Vulnerability changelog

More a security patch than a feature upgrade.

- requests>=2.31.0
- A little toy-level websocket features. `pip install tornado` (not specified in `requirements.txt`) to run the example in `neo_fairy_client/websocket/fairy_websocket.py`.
- Minor supplementary error info

Potentially the out-dated dependency neo_mamba==0.9 will be dropped in the future.

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681