PyPi: Importspy

CVE-2024-56326

Transitive

Safety vulnerability ID: 74774

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Dec 23, 2024 Updated at Dec 30, 2024
Scan your Python projects for vulnerabilities →

Advisory

Importspy 0.1.12 updates its dependency 'Jinja2' to v3.1.5 to include a security fix.

Affected package

importspy

Latest version: 0.1.12

ImportSpy is a lightweight Python library that enables proactive control over how your code is used when imported by other modules or packages. It allows developers to define rules that importing modules must follow, ensuring proper use and preventing misuse or errors.

Affected versions

Fixed versions

Vulnerability changelog

Changelog:
- **Dependency Updates**:
- **Pydantic**: Updated from `2.10.3` to `2.10.4`.
- Includes bug fixes and compatibility improvements. Notable changes:
- Resolved an `AttributeError` when using data classes with `defer_build=True`.
- Fixed URL compatibility issues between versions `2.9.2` and `2.10.X`.
- Details: [GitHub Issues](https://github.com/pydantic/pydantic/issues/10910)
- **Jinja2**: Updated from `3.1.4` to `3.1.5`.
- Introduced critical security fixes and minor bug resolutions to enhance stability.
- Details: [New Releases](https://newreleases.io/project/pypi/Jinja2/release/3.1.5)
- **Pytest**: Updated from `8.3.3` to `8.3.4`.
- General improvements and bug fixes for the Python testing framework.
- **Sphinx-rtd-theme**: Updated from `3.0.1` to `3.0.2`.
- Minor updates to improve the style and functionality of Sphinx-generated documentation.

- **Why Upgrade?**
This release ensures a more stable, secure, and feature-rich environment. Dependency updates address known issues and provide important improvements.

For further details, see the links provided for specific dependency updates.

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application