CVE-2024-21503

Advisory

Napalm-s350 version 0.3.2 updates its dependency 'black' to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* adding read_timeout_override and session_log optional_args for netmiko by davama in https://github.com/napalm-automation-community/napalm-s350/pull/84
* Bump black from 20.8b1 to 24.3.0 by dependabot in https://github.com/napalm-automation-community/napalm-s350/pull/85
* Add security changes for black CVE-2024-21503, update test tools by qaxi in https://github.com/napalm-automation-community/napalm-s350/pull/86

New Contributors
* davama made their first contribution in https://github.com/napalm-automation-community/napalm-s350/pull/84
* dependabot made their first contribution in https://github.com/napalm-automation-community/napalm-s350/pull/85

**Full Changelog**: https://github.com/napalm-automation-community/napalm-s350/compare/0.3.1...0.3.2

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21503
• https://github.com/napalm-automation-community/napalm-s350/pull/86