CVE-2024-35195

Advisory

Falcon-integration-gateway version 3.1.12 upgrades its requests dependency from version 2.31.0 to 2.32.0 to address the security vulnerability identified as CVE-2024-35195.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* fix(aws): add missing arn for govcloud support by carlosmmatos in https://github.com/CrowdStrike/falcon-integration-gateway/pull/174
* fix(aws): update severity to match new sechub format by carlosmmatos in https://github.com/CrowdStrike/falcon-integration-gateway/pull/175
* chore(deps): bump github/codeql-action from 2 to 3 by dependabot in https://github.com/CrowdStrike/falcon-integration-gateway/pull/177
* chore(deps): bump actions/setup-python from 4 to 5 by dependabot in https://github.com/CrowdStrike/falcon-integration-gateway/pull/176
* [Snyk] Fix for 8 vulnerabilities by ffalor in https://github.com/CrowdStrike/falcon-integration-gateway/pull/178
* [Snyk] Security upgrade requests from 2.31.0 to 2.32.0 by ffalor in https://github.com/CrowdStrike/falcon-integration-gateway/pull/179
* fix(aws): minor updates to sechub backend by carlosmmatos in https://github.com/CrowdStrike/falcon-integration-gateway/pull/180
* chore: bump v3.1.12 by carlosmmatos in https://github.com/CrowdStrike/falcon-integration-gateway/pull/181

New Contributors
* ffalor made their first contribution in https://github.com/CrowdStrike/falcon-integration-gateway/pull/178

**Full Changelog**: https://github.com/CrowdStrike/falcon-integration-gateway/compare/3.1.11...3.1.12

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195