CVE-2024-21503

Advisory

Affected versions of Testrail-api update its dependency 'black', to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* Security depends by tolstislon in https://github.com/tolstislon/testrail-api/pull/107
* [Black vulnerable to Regular Expression Denial of Service (ReDoS)](https://github.com/tolstislon/testrail-api/security/dependabot/2)
* [Requests `Session` object does not verify requests after making first request with verify=False](https://github.com/tolstislon/testrail-api/security/dependabot/3)


**Full Changelog**: https://github.com/tolstislon/testrail-api/compare/1.13.0...1.13.1

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21503
• https://github.com/tolstislon/testrail-api/pull/107/commits/7951de88fc4d41a04ac7106873a1dde508e6da9f