CVE-2023-6237

Advisory

Snyk-tags version 2.2.4 updates its dependency on the cryptography library to version 42.0.4. This change is made to address the security issue identified as CVE-2023-6237.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* fix: pin cryptography to v42.0.4 to resolve vulnerabilities by snykerjames in https://github.com/snyk-labs/snyk-tags-tool/pull/31
* chore: bump version in pyproject.toml by scott-es in https://github.com/snyk-labs/snyk-tags-tool/pull/32

New Contributors
* snykerjames made their first contribution in https://github.com/snyk-labs/snyk-tags-tool/pull/31
* scott-es made their first contribution in https://github.com/snyk-labs/snyk-tags-tool/pull/32

**Full Changelog**: https://github.com/snyk-labs/snyk-tags-tool/compare/v2.2.3...v2.2.4

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237
• https://github.com/snyk-labs/snyk-tags-tool/pull/31