CVE-2023-37920

Advisory

Bittensor version 6.12.0 updates its `certifi` package to versions 2023.7.22 and 2024.2.2 to address the security issues identified in CVE-2023-37920.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* Tests: Axon to_string patch import by ibraheem-opentensor in https://github.com/opentensor/bittensor/pull/1785
* Tests: Extends coverage on Serving extrinsics methods by ibraheem-opentensor in https://github.com/opentensor/bittensor/pull/1783
* Fix: CVE-2024-24762 FastAPI by gus-opentensor in https://github.com/opentensor/bittensor/pull/1800
* Fix: CVE-2024-26130 | vulnerability cryptography by gus-opentensor in https://github.com/opentensor/bittensor/pull/1801
* fix PR templates by mjurbanski-reef in https://github.com/opentensor/bittensor/pull/1778
* Fix: SNYK-PYTHON-CERTIFI-5805047 | Vulnerability Certifi by ibraheem-opentensor in https://github.com/opentensor/bittensor/pull/1816
* Tests: Extends test coverage on Registration methods by ibraheem-opentensor in https://github.com/opentensor/bittensor/pull/1814
* Fix: Wallet overwrite functionality by ibraheem-opentensor in https://github.com/opentensor/bittensor/pull/1802


**Full Changelog**: https://github.com/opentensor/bittensor/compare/v6.11.0...v6.12.0

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37920