SecOps: Security issues found with grPC lib

[cristian-rincon]

Hi,

I'm using Blackduck to get insights about security issues with FOSS libs we are about to use, and we've found this issues after installing your lib:

Vulnerability CVE-2023-32732 found in grPC lib
Vulnerability CVE-2023-32731 found in grPC lib
Vulnerability CVE-2023-1428 found in grPC lib

Do you have any workaround or planned work to fix them?

Thanks in advance

[cristian-rincon]

Adding @dggarciam to seek this issue

[adriangb]

It's an upstream issue: grpc/grpc#31492

[adriangb]

I just made a new release removing the pin. FWIW it also only ever applied to M1 macs.

[cristian-rincon]

Hi, I just wanted to let you know that your Release pipeline failed. https://github.com/adriangb/scikeras/blob/master/pyproject.toml

as a result of that, your fix was not published to the Pypi.

[adriangb]

I am aware