CVE-2024-34069

Advisory

Due to security concerns, hvac 2.3.0 updates its Werkzeug dependency from ^2.3.7 to ^3.0.3 to address CVE-2024-34069.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

🚀 Features

- Implement the /sys/wrapping/wrap endpoint ([GH-1172](https://github.com/hvac/hvac/pull/1172))
- add support for Vault Raft auto-snapshot endpoints. ([GH-1169](https://github.com/hvac/hvac/pull/1169))

🧰 Miscellaneous

- Dependencies/security updates ([GH-1174](https://github.com/hvac/hvac/pull/1174))
- update artifact actions to v4 ([GH-1173](https://github.com/hvac/hvac/pull/1173))

Resources

• https://github.com/hvac/hvac/commit/6f800a87a9351a7b24d97dc0651b69fdf6cc17b6
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34069