CVE-2024-24762

Advisory

Fastapi-opa has updated fastapi to address a vulnerability identified in CVE-2024-24762. As a result of this update, support for Python 3.7 has been discontinued. The new requirements specify Python versions >= 3.8, < 4.0 and FastAPI versions >= 0.109.2.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

- Drop Python 3.7 support due to FastAPI update
- Update dependencies due to vulnerabilities:
- [fastapi](https://github.com/advisories/GHSA-qf9m-vfgh-m389)

Resources

• https://github.com/busykoala/fastapi-opa/commit/9e8870c68b8bac59b482e49aaf84ac365bd8ae3b#diff-50c86b7ed8ac2cf95bd48334961bf0530cdc77b5a56f852c5c61b89d735fd711
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24762