CVE-2023-37920

Advisory

Twilio version 9.0.5 has upgraded its certifi library from version 2021.10.8 to 2023.7.22 in response to the security issue detailed in CVE-2023-37920.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

--------------------------
**Library - Chore**
- [PR 742](https://github.com/twilio/twilio-python/pull/742): [Snyk] Fix for 3 vulnerabilities. Thanks to [twilio-product-security](https://github.com/twilio-product-security)!

**Flex**
- Add header `ui_version` to `web_channels` API

**Messaging**
- Redeploy after failed pipeline

**Numbers**
- Add Delete Port In request phone number api and Add Delete Port In request api

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37920
• https://github.com/twilio/twilio-python/pull/742