CVE-2024-35195

Advisory

Affected versions of `testrail-api` are potentially vulnerable due to a dependency on `requests` version 2.31.0, which is impacted by a vulnerability that can possibly allow an attacker to exploit a flaw in handling certain HTTP responses, leading to unintended behaviors or security issues.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* Security depends by tolstislon in https://github.com/tolstislon/testrail-api/pull/107
* [Black vulnerable to Regular Expression Denial of Service (ReDoS)](https://github.com/tolstislon/testrail-api/security/dependabot/2)
* [Requests `Session` object does not verify requests after making first request with verify=False](https://github.com/tolstislon/testrail-api/security/dependabot/3)


**Full Changelog**: https://github.com/tolstislon/testrail-api/compare/1.13.0...1.13.1

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195
• https://github.com/tolstislon/testrail-api/pull/107/commits/b7a57261b17fca399b0487a8b7f2c71e237b7b2a