CVE-2024-34064

Advisory

Dpulse 2.2.2 updates its Jinja2 dependency to version 3.1.4 to address the CVE-2024-34064 vulnerability.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

5) Fixed wrong entry point in pyproject.toml file

v1.0.2m
NETWORKING PROCESSOR

1) Fixed error when get_sitemap_xml function couldn't get sitemap.xml by adding some more checks
2) Modified sitemap gathering function to interact with xlsx_report_creation.py module

XLSX REPORT CREATION PROCESSOR

1) Created xlsx_report_creation.py module which will handle XLSX report creation and its writing to report storage database

DPULSE MAIN

1) Added xlsx report file type selection

REPORT STORAGE DATABASE

1) Redacted SQL database creation script by adding column with report file extension
2) Output sequence when choosing print in CLI
3) Added some exception handlers (recreate report with id which is not in db)

DORKING PROCESSOR

1) Added transfer_results_to_xlsx function to

COMMAND LINE INTERFACE

1) Extended output of database content with report file extension (XLSX or PDF)
2) Slightly changed output of DB content while choosing manage database menu

FILES PROCESSING MODULE

1) Renamed "get_pdf_blob" function to "get_blob"

REQUIREMENTS

1) Updated Jinja2 requirement to version 3.1.4 in order to path CVE-2024-34064 vulnerability
2) Added openpyxl 3.1.2 requirement

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34064