CVE-2024-42471

Advisory

Updated the actions/download-artifact in Pyvbmc from actions/download-artifact@v3 to actions/download-artifact@v4 to address CVE-2024-42471.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* Update actions/download-artifact (https://github.com/advisories/GHSA-… by pipme in https://github.com/acerbilab/pyvbmc/pull/147
* Update numpy and cma versions. by pipme in https://github.com/acerbilab/pyvbmc/pull/146


**Full Changelog**: https://github.com/acerbilab/pyvbmc/compare/v1.0.3...v1.0.4

What's Changed
* Update actions/download-artifact (https://github.com/advisories/GHSA-… by pipme in https://github.com/acerbilab/pyvbmc/pull/147
* Update numpy and cma versions. by pipme in https://github.com/acerbilab/pyvbmc/pull/146
* Update upload-artifact. by pipme in https://github.com/acerbilab/pyvbmc/pull/148
* Chore(deps): Bump pypa/gh-action-pypi-publish from 1.6.4 to 1.10.2 by dependabot in https://github.com/acerbilab/pyvbmc/pull/151
* Chore(deps): Bump actions/checkout from 3 to 4 by dependabot in https://github.com/acerbilab/pyvbmc/pull/150
* Chore(deps): Bump actions/setup-python from 4 to 5 by dependabot in https://github.com/acerbilab/pyvbmc/pull/149

New Contributors
* dependabot made their first contribution in https://github.com/acerbilab/pyvbmc/pull/151

**Full Changelog**: https://github.com/acerbilab/pyvbmc/compare/v1.0.3...v1.0.4

Resources

• https://github.com/acerbilab/pyvbmc/pull/147/commits/8e2727c792a6fba8b6a0f92b00f59c032493cdde
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42471