[SECURITY] Update dependency future to v0.18.3 [SECURITY] #1

Merged

renovate[bot] merged 1 commits from renovate/pypi-future-vulnerability into main 2023-04-05 22:02:53 +02:00

Conversation 1 Commits 1 Files Changed 1 +1 -1

renovate[bot] commented 2023-04-05 21:58:30 +02:00 (Migrated from github.com)

Copy Link

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
future	==0.18.2 -> ==0.18.3

GitHub Vulnerability Alerts

CVE-2022-40899

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server. This issue has been patched in version 0.18.3.

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [future](https://python-future.org) | `==0.18.2` -> `==0.18.3` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2022-40899](https://nvd.nist.gov/vuln/detail/CVE-2022-40899) An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server. This issue has been patched in version 0.18.3. --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/luketainton/roboluke-tasks). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4zMi4yIiwidXBkYXRlZEluVmVyIjoiMzUuMzIuMiJ9-->

luketainton (Migrated from github.com) reviewed 2023-04-05 21:58:30 +02:00

sonarqubecloud[bot] commented 2023-04-05 22:00:05 +02:00 (Migrated from github.com)

Copy Link

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

Kudos, SonarCloud Quality Gate passed!&nbsp; &nbsp; [](https://sonarcloud.io/dashboard?id=luketainton_roboluke-tasks&pullRequest=1) [](https://sonarcloud.io/project/issues?id=luketainton_roboluke-tasks&pullRequest=1&resolved=false&types=BUG) [](https://sonarcloud.io/project/issues?id=luketainton_roboluke-tasks&pullRequest=1&resolved=false&types=BUG) [0 Bugs](https://sonarcloud.io/project/issues?id=luketainton_roboluke-tasks&pullRequest=1&resolved=false&types=BUG) [](https://sonarcloud.io/project/issues?id=luketainton_roboluke-tasks&pullRequest=1&resolved=false&types=VULNERABILITY) [](https://sonarcloud.io/project/issues?id=luketainton_roboluke-tasks&pullRequest=1&resolved=false&types=VULNERABILITY) [0 Vulnerabilities](https://sonarcloud.io/project/issues?id=luketainton_roboluke-tasks&pullRequest=1&resolved=false&types=VULNERABILITY) [](https://sonarcloud.io/project/security_hotspots?id=luketainton_roboluke-tasks&pullRequest=1&resolved=false&types=SECURITY_HOTSPOT) [](https://sonarcloud.io/project/security_hotspots?id=luketainton_roboluke-tasks&pullRequest=1&resolved=false&types=SECURITY_HOTSPOT) [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=luketainton_roboluke-tasks&pullRequest=1&resolved=false&types=SECURITY_HOTSPOT) [](https://sonarcloud.io/project/issues?id=luketainton_roboluke-tasks&pullRequest=1&resolved=false&types=CODE_SMELL) [](https://sonarcloud.io/project/issues?id=luketainton_roboluke-tasks&pullRequest=1&resolved=false&types=CODE_SMELL) [0 Code Smells](https://sonarcloud.io/project/issues?id=luketainton_roboluke-tasks&pullRequest=1&resolved=false&types=CODE_SMELL) [](https://sonarcloud.io/component_measures?id=luketainton_roboluke-tasks&pullRequest=1&metric=coverage&view=list) No Coverage information [](https://sonarcloud.io/component_measures?id=luketainton_roboluke-tasks&pullRequest=1&metric=duplicated_lines_density&view=list) No Duplication information

Sign in to join this conversation.

Reviewers

No reviewers

luketainton

Labels

Clear labels   

bug

Something isn't working

  

dependencies

Pull requests that update a dependency file

  

documentation

Improvements or additions to documentation

  

duplicate

This issue or pull request already exists

  

enhancement

New feature or request

  

good first issue

Good for newcomers

  

help wanted

Extra attention is needed

  

invalid

This doesn't seem right

  

question

Further information is requested

  

security

  

wontfix

This will not be worked on

No Label

bug

dependencies

documentation

duplicate

enhancement

good first issue

help wanted

invalid

question

security

wontfix

Milestone

Clear milestone

No items

No Milestone

Assignees

Clear assignees

No Assignees

1 Participants

Notifications

Subscribe

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: public/roboluke-tasks#1

No description provided.