CVE-2023-4863

Advisory

Pygments-promql 0.1.0 updates its dependency 'pillow' to v10.0.1 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Bug fixes, CI improvements or minor changes

* Update list of supported Python versions: Python 3.7 was deprecated, and support for 3.11 and 3.12 was added.
* Bump pillow from 9.3.0 to 10.0.1, for security reasons https://github.com/pabluk/pygments-promql/pull/20
* Update requirements versions https://github.com/pabluk/pygments-promql/commit/74e73d601b58f6d7395af440651dbd930491b6de

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5129
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4863