PVE-2021-38483

Advisory

Aiohttp-swagger before 1.0.15 includes a version of js-yaml that's not secure.

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

- Fixes a bug in setup.py where the distribution exports the package tests along with the…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://pypi.org/project/aiohttp-swagger
• https://pyup.io/changelogs/aiohttp-swagger/