CVE-2024-26130

Advisory

Deepdataspace version 0.11.0 upgrades its cryptography library from version 42.0.2 to 42.0.5 to address the security issue detailed in CVE-2024-26130.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's New:
- optimize: speed up dataset loading
- feature: support random visit to dataset
- bugfix: fix dataset filter update logic
- upgrade: security upgrades for Python dependencies

本次更新:
- 优化：数据集加载速度
- 功能：支持数据集随机访问
- 修复：修复数据集筛选栏的更新逻辑
- 升级：升级 Python 包的安全更新

Resources

• https://github.com/IDEA-Research/deepdataspace/commit/8ef5bc709756449b8709685ea5933b5f9a99a732
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26130