CVE-2024-56326

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

Changelog:
- **Dependency Updates**:
- **Pydantic**: Updated from `2.10.3` to `2.10.4`.
- Includes bug fixes and compatibility improvements. Notable changes:
- Resolved an `AttributeError` when using data classes with `defer_build=True`.
- Fixed URL compatibility issues between versions `2.9.2` and `2.10.X`.
- Details: [GitHub Issues](https://github.com/pydantic/pydantic/issues/10910)
- **Jinja2**: Updated from `3.1.4` to `3.1.5`.
- Introduced critical security fixes and minor bug resolutions to enhance stability.
- Details: [New Releases](https://newreleases.io/project/pypi/Jinja2/release/3.1.5)
- **Pytest**: Updated from `8.3.3` to `8.3.4`.
- General improvements and bug fixes for the Python testing framework.
- **Sphinx-rtd-theme**: Updated from `3.0.1` to `3.0.2`.
- Minor updates to improve the style and functionality of Sphinx-generated documentation.

- **Why Upgrade?**
This release ensures a more stable, secure, and feature-rich environment. Dependency updates address known issues and provide important improvements.

For further details, see the links provided for specific dependency updates.

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56326