CVE-2024-37891

Advisory

Locopy 0.5.9 updates its urllib3 dependency from version 2.0.7 to 2.2.2 to address security concerns, including CVE-2024-37891.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* Changes by run-edgetest action by github-actions in https://github.com/capitalone/locopy/pull/265
* Changes by run-edgetest action by github-actions in https://github.com/capitalone/locopy/pull/266
* Changes by run-edgetest action by github-actions in https://github.com/capitalone/locopy/pull/267
* Changes by run-edgetest action by github-actions in https://github.com/capitalone/locopy/pull/268
* Changes by run-edgetest action by github-actions in https://github.com/capitalone/locopy/pull/269
* Changes by run-edgetest action by github-actions in https://github.com/capitalone/locopy/pull/270
* Changes by run-edgetest action by github-actions in https://github.com/capitalone/locopy/pull/272
* Changes by run-edgetest action by github-actions in https://github.com/capitalone/locopy/pull/273
* add support for parsing newer pandas dtype by gladysteh99 in https://github.com/capitalone/locopy/pull/277
* urllib3 vulnerability by fdosani in https://github.com/capitalone/locopy/pull/276
* v0.5.9 by gladysteh99 in https://github.com/capitalone/locopy/pull/278

New Contributors
* gladysteh99 made their first contribution in https://github.com/capitalone/locopy/pull/277

**Full Changelog**: https://github.com/capitalone/locopy/compare/v0.5.8...v0.5.9

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37891
• https://github.com/capitalone/locopy/pull/276/commits/a07e2822b45bb771b8a84cbf3f71e4cd4047c403#diff-4d7c51b1efe9043e44439a949dfd92e5827321b34082903477fd04876edb7552