CVE-2024-4603

Advisory

Anaplan-api 0.2.13 updates its cryptography dependency from version 42.0.6 to 42.0.8 to include a security fix for CVE-2024-4603.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* Update requests and cryptography dependencies from vulnerable versions by jeswils-ap in https://github.com/jeswils-ap/anaplan-api/pull/22
* [Snyk] Fix for 3 vulnerabilities by jeswils-ap in https://github.com/jeswils-ap/anaplan-api/pull/25
* Update dependencies to fix vulnerabilities identified by Snyk by jeswils-ap in https://github.com/jeswils-ap/anaplan-api/pull/26
* Sync latest version of pyproject to github by jeswils-ap in https://github.com/jeswils-ap/anaplan-api/pull/27


**Full Changelog**: https://github.com/jeswils-ap/anaplan-api/compare/v0.2.11...v0.2.13

Resources

• https://github.com/jeswils-ap/anaplan-api/pull/25/commits/960a80590681ae6a7b59f80f33f789d950c99cac
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603