Workflow

PyPi: Modelsmith

CVE-2024-37891

Transitive

Safety vulnerability ID: 71808

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Jun 17, 2024 Updated at Jul 09, 2024
Scan your Python projects for vulnerabilities →

Advisory

Modelsmith 0.4.2 updates its urllib3 dependency from version 2.2.1 to 2.2.2 to address CVE-2024-37891.

Affected package

modelsmith

Latest version: 0.6.1

Get Pydantic models and Python types as LLM responses from Google Vertex AI and OpenAI models.

Affected versions

Fixed versions

Vulnerability changelog

Updated dependencies to address urllib3's Proxy-Authorization security issue

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application