CVE-2024-34064

Advisory

Konoha version 5.5.6a0 updates its Jinja2 dependency from 3.1.3 to 3.1.4 in response to CVE-2024-34064.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* deps: poetry update by himkt in https://github.com/himkt/konoha/pull/208
* deps: update vulnerable packages by himkt in https://github.com/himkt/konoha/pull/212
* deps: use rye instead of poetry by himkt in https://github.com/himkt/konoha/pull/213


**Full Changelog**: https://github.com/himkt/konoha/compare/v5.5.5...v5.5.6a0

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34064
• https://github.com/himkt/konoha/pull/212/commits/eb8fdc0016323cd6d8673b1a0756069da6292116