New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security Vulneratbility CVE-2022-40899 on future #442

Open

ornew opened this issue Jan 6, 2023 · 1 comment

ornew commented Jan 6, 2023

REDoS Vulneratbility in Python Charmers Future
https://www.cve.org/CVERecord?id=CVE-2022-40899

Open issue with future: PythonCharmers/python-future#612

The last commit to future is 2019 so it's unlikely a patch will occur.
It would be preferable to remove this dependency if possible.

devmessias mentioned this issue

Security Vulneratbility CVE-2022-40899 on future crflynn/sqlalchemy-databricks#20

Open

Contributor

mdeshmu commented Jul 14, 2023

This was addressed in PythonCharmers/python-future#610 and released in future lib version 0.18.3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment