Dependency vulnerability - py - CVE-2020-29651 #378
Comments
|
New py 1.10.0 release (pytest-dev/py@e5ff378) will resolve this issue with https://pypi.org/project/py/1.10.0/ which in now available. |
earthgecko
added a commit
that referenced
this issue
Dec 12, 2020
IssueID #3694: #3874: SNYK-PYTHON-PY-1049546 Dependency vulnerability - py - CVE-2020-29651 #378 - Update py to 1.10.0 which resolves CVE-2020-29651 by implementing pytest-dev/py#257 which fixes pytest-dev/py#256 Modified: dev-requirements.txt requirements.txt
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
As per SNYK-PYTHON-PY-1049546: Regular Expression Denial of Service (ReDoS) [Medium Severity] https://snyk.io/vuln/SNYK-PYTHON-PY-1049546 in py@1.9.0
Tracking py vulnerability - pytest-dev/py#256
py is required by pytest in requirements.txt
Fixed in py, but no new py release with the fix yet.
The text was updated successfully, but these errors were encountered: