CVE-2024-3651

Advisory

Fastapi-opa has updated `idna` to versions 3.6 and 3.7 due to the CVE-2024-3651.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

- Security Improvement: Added authentication and authorization checks for HTTP
OPTIONS requests in OpaMiddleware. This ensures that OPTIONS requests are
subjected to the same security policies as other HTTP methods, preventing
potential information leaks.
[See advisory for more details](https://github.com/advisories/GHSA-5f5c-8rvc-j8wf)
- Update dependencies due to multiple vulnerabilities.

Resources

• https://github.com/busykoala/fastapi-opa/commit/00ba64adc542962e05a1983d7a89ea1c07f90d8c
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3651