CVE-2023-41040

Advisory

Readmeai 0.3.17 updates its dependency 'gitpython' to v3.1.36 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

🐛 Bug Fixes

- Update file parsing logic in [parse.py](https://github.com/eli64s/readme-ai/blob/main/readmeai/parse.py) and [preprocess.py](https://github.com/eli64s/readme-ai/blob/main/readmeai/preprocess.py) for codebases containing the following dependency files (issue [#37](https://github.com/eli64s/readme-ai/issues/37)).
- *CMakeLists.txt*
- *Makefile.am*
- *configure.ac*
- Credit to [mooujarrar](https://github.com/mooujarrar) for the help in solving this issue!
🔐 Security

- Bump [gitpython](https://github.com/gitpython-developers/GitPython) module to version *3.1.36* to address security vulnerability (Dependabot Alert [#5](https://github.com/eli64s/readme-ai/security/dependabot/5) and issue [#43](https://github.com/eli64s/readme-ai/issues/43)).

---

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41040