CVE-2023-37276

Advisory

Neo-mamba 2.0.2 updates 'aiohttp' to 3.8.5 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* api: fix wait_for_transaction_receipt for neo-go nodes by ixje in https://github.com/CityOfZion/neo-mamba/pull/273
* setup: update aiohttp to 3.8.5 due to a vulnerability issue by evgeniiz321 in https://github.com/CityOfZion/neo-mamba/pull/274
* examples: update token hash and fix wallet passwords by ixje in https://github.com/CityOfZion/neo-mamba/pull/275
* setup: update dependencies by ixje in https://github.com/CityOfZion/neo-mamba/pull/276
* ci: actually fail if Black finds format issues by ixje in https://github.com/CityOfZion/neo-mamba/pull/277

**Full Changelog**: https://github.com/CityOfZion/neo-mamba/compare/v2.0.1...v2.0.2

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37276