CVE-2023-32681

Advisory

Highcharts-gantt 1.2.0 updates its dependency 'requests' to v2.31.0 to include a security fix.
https://github.com/highcharts-for-python/highcharts-gantt/commit/804b5bf1bd39f75690e6c13621a60cfcd39abf75

Affected package

Affected versions

Fixed versions

Vulnerability changelog

=========================================

* **ENHANCEMENT:** Align the API to **Highcharts (JS) v.11.1** (22). In particular, this includes:

* Changes inherited from **Highcharts Core for Python v.1.2.0**. See `here <https://core-docs.highchartspython.com/en/latest/history.html#release-1-2-0>`__.

* **ENHANCEMENT:** Added support for the inclusion of scripts based on features used in the chart (7).
* **ENHANCEMENT:** Added ``dict`` support to ``.style`` property on labels and titles.
* **DOCS:** Various documentation updates and fixes.
* **DEPENDENCY:** Bumped ``requests`` version for security patch.

---------------

Resources

• https://pypi.org/project/highcharts-gantt
• https://pyup.io/changelogs/highcharts-gantt/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681