CVE-2023-45803

Advisory

Getgauge 0.4.1 updates its dependency 'urllib3' to v2.0.7 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Gauge Python v0.4.1


- 296 - Replacing hub with gh cli
- 295 - Updating dependencies to resolve vulnerabilities
- 294 - Bump urllib3 from 2.0.4 to 2.0.7
- 286 - Bump readme-renderer from 40.0 to 42.0
- 284 - Bump actions/checkout from 3 to 4
- 282 - Bump protobuf from 4.24.0 to 4.24.2
- 279 - Bump debugpy from 1.6.7 to 1.6.7.post1
- 278 - Bump protobuf from 4.23.4 to 4.24.0
- 275 - Bump more-itertools from 10.0.0 to 10.1.0
- 274 - Bump rich from 13.5.1 to 13.5.2
- 273 - Bump pygments from 2.15.1 to 2.16.1
- 272 - Bump rich from 13.4.2 to 13.5.1
- 271 - adds sleep before attaching assets in release pipeline

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803