CVE-2024-37568

Advisory

Due to security concerns, hvac 2.3.0 updates its Authlib dependency from ^1.0.1 to ^1.3.1 to address CVE-2024-37568.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

🚀 Features

- Implement the /sys/wrapping/wrap endpoint ([GH-1172](https://github.com/hvac/hvac/pull/1172))
- add support for Vault Raft auto-snapshot endpoints. ([GH-1169](https://github.com/hvac/hvac/pull/1169))

🧰 Miscellaneous

- Dependencies/security updates ([GH-1174](https://github.com/hvac/hvac/pull/1174))
- update artifact actions to v4 ([GH-1173](https://github.com/hvac/hvac/pull/1173))

Resources

• https://github.com/hvac/hvac/commit/6f800a87a9351a7b24d97dc0651b69fdf6cc17b6
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37568