CVE-2023-32681

Advisory

Highcharts-maps 1.2.0 updates its dependency 'requests' to v2.31.0 to include a security fix.
https://github.com/highcharts-for-python/highcharts-maps/commit/dac460249e2bbc1e33a518af48cb6fc6c91ca00e

Affected package

Affected versions

Fixed versions

Vulnerability changelog

=========================================

* **ENHANCEMENT:** Align the API to **Highcharts (JS) v.11.1** (21). In particular, this includes:

* Changes inherited from **Highcharts Core for Python v.1.2.0**. See `here <https://core-docs.highchartspython.com/en/latest/history.html#release-1-2-0>`__.
* Added ``TiledWebMapOptions`` / ``TiledWebMapSeries`` support.

* **ENHANCEMENT:** Added support for the inclusion of scripts based on features used in the chart (6).
* **ENHANCEMENT:** Added ``dict`` support to ``options.series.labels.SeriesLabel.style`` and ``utility_classes.data_labels.DataLabel.style``.
* **BUGFIX:** Fixed de-serialization error in ``options.series.data.geometric.GeometricZData`` which
prevented the population of ``.properties``.
* **DOCS:** Several documentation fixes.
* **DEPENDENCY:** Bumped ``requests`` version for security patch.

---------------------

Resources

• https://pypi.org/project/highcharts-maps
• https://pyup.io/changelogs/highcharts-maps/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681