CVE-2024-43805

Advisory

Numpyro-oop has resolved a security vulnerability in jupyterlab by updating the development dependency to version 4.2.5, addressing CVE-2024-43805.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This release

- updates key dependency numpyro to 0.15.3,
- fixes a security issue in `jupyterlab` by updating that dev dependency to `4.2.5`,
- fixes a bug with incorrectly passed `model_kwargs`

What's Changed
* Fixes model kwargs argument passing by whaiao in https://github.com/ag-perception-wallis-lab/numpyro-oop/pull/3
* Merge bug fixing changes and add CI testing by tomwallis in https://github.com/ag-perception-wallis-lab/numpyro-oop/pull/4
* Update deps by tomwallis in https://github.com/ag-perception-wallis-lab/numpyro-oop/pull/5

New Contributors
* whaiao made their first contribution in https://github.com/ag-perception-wallis-lab/numpyro-oop/pull/3

**Full Changelog**: https://github.com/ag-perception-wallis-lab/numpyro-oop/compare/0.0.1...0.0.2

Resources

• https://github.com/ag-perception-wallis-lab/numpyro-oop/commit/b7124397229e7b4736859038a8e273992d5031fd
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43805