Skip to content
This repository has been archived by the owner on Jul 13, 2023. It is now read-only.

Upgrade requests per latest CVE #1300

Closed
pjenvey opened this issue Oct 31, 2018 · 0 comments
Closed

Upgrade requests per latest CVE #1300

pjenvey opened this issue Oct 31, 2018 · 0 comments

Comments

@pjenvey
Copy link
Member

pjenvey commented Oct 31, 2018

github's alerted us to a CVE in our requests version:

https://github.com/mozilla-services/autopush/network/alert/requirements.txt/requests/open

https://nvd.nist.gov/vuln/detail/CVE-2018-18074

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants