Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Minor upgrade for aiohttp (Critical) #17

Open
mijho opened this issue Apr 23, 2024 — with Aikido Issues · 0 comments
Open

Minor upgrade for aiohttp (Critical) #17

mijho opened this issue Apr 23, 2024 — with Aikido Issues · 0 comments
Assignees

Comments

Copy link
Contributor

mijho commented Apr 23, 2024

Find more live information in Aikido here: https://app.aikido.dev/queue?sidebarIssue=293116&groupId=333&sidebarIssueTask=14762&sidebarTab=tasks

==== Scope ====
This task includes issues in the following code repository:

  • whisper-and-echo: poetry.lock

==== TLDR ====
aiohttp is affected by 3 unique vulnerabilities. 1 is critical and 2 are medium.

==== How to fix ====
In order to fix all of these vulnerabilities, update aiohttp to 3.9.4. In order to solve only the critical issues, update to 3.9.2 or upgrade one at a time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants