CVE-2023-4863

Advisory

Kolena 0.95.0 updates its dependency 'pillow' to versions '^10.0.1' to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Commits
- 1e37751: Upgrade pillow for security (305) (ly-kolena) [305](https://github.com/kolenaIO/kolena/pull/305)
- a766fd7: Add optional `tags` field to Model (308) (Connor Soulliere) [308](https://github.com/kolenaIO/kolena/pull/308)
- 9d93f25: Remove join columns from dataset result (311) (ly-kolena) [311](https://github.com/kolenaIO/kolena/pull/311)
- ffe3d99: Add diarization workflow to examples (307) (Bill Bai) [307](https://github.com/kolenaIO/kolena/pull/307)
- 9b509dd: Delete temp.ipynb (313) (Bill Bai) [313](https://github.com/kolenaIO/kolena/pull/313)
- 3fb93d2: Correct TestSuite `load_all` docstring (314) (Connor Soulliere) [314](https://github.com/kolenaIO/kolena/pull/314)
- dc5ec2a: [KOL-3748] allow kolena session to have additional headers (316) (nankolena) [316](https://github.com/kolenaIO/kolena/pull/316)
- 7229ab2: KOL-3377 Add FR 1:1 example integration to kolenaIO/kolena (229) (a75w-kolena) [229](https://github.com/kolenaIO/kolena/pull/229)
- f3331fe: FR icon fix (318) (Yoohee Choi) [318](https://github.com/kolenaIO/kolena/pull/318)
- 0942845: change the click package version to make it compatible to customer environment (319) (grant-Kolena) [319](https://github.com/kolenaIO/kolena/pull/319)
- 2196315: Rotate KOLENA_TOKEN used by CI job (321) (Connor Soulliere) [321](https://github.com/kolenaIO/kolena/pull/321)
- 6e8fa31: Bump min Kolena version in examples to 0.94.0 (317) (Connor Soulliere) [317](https://github.com/kolenaIO/kolena/pull/317)
- de651a6: Added ThresholdedMetrics on the experimental package (320) (diegokolena) [320](https://github.com/kolenaIO/kolena/pull/320)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4863