CVE-2024-35195

Advisory

Piecash has updated `requests` from version 2.24.0 to 2.32.2 to address CVE-2024-35195.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

~~~~~~~~~~~~~~~~~~~~~~~~~~

- bumping dependencies to fix security issues
- fix ability to get to TXN from Invoice (and Lot) [Jared Kipe]
- fix migration to SA1.4 (fix 165) [kapinga]
- fix ledger export to quote account name in case of special characters (fix 215) [sdementen]
- fix ledger export to exclude "check commodity" when commodity is not a currency [sdementen]
- fix python 3.12 support (fix 212) [teeberg]
- fix yahoo import due to null values (fix 202) [JCPvanHooren]

Resources

• https://github.com/sdementen/piecash/pull/225/commits/738f8d3c91c5746a69712b5640d919e983056997
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195