Skip to content

Commit 97c7bf5

Browse files
[Anaconda]-Jinja2-GHSA-h75v-3vvj-5mfj patch security vuln (devcontainers#1063)
Co-authored-by: Samruddhi Khandale <skhandale@microsoft.com>
1 parent 4735279 commit 97c7bf5

File tree

2 files changed

+4
-1
lines changed

2 files changed

+4
-1
lines changed

src/anaconda/.devcontainer/Dockerfile

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,9 @@ RUN python3 -m pip install --upgrade \
4545
# https://github.com/advisories/GHSA-4qhp-652w-c22x
4646
jupyter-lsp==2.2.2 \
4747
# https://github.com/advisories/GHSA-jjg7-2v4v-x38h
48-
idna==3.7
48+
idna==3.7 \
49+
# https://github.com/advisories/GHSA-h75v-3vvj-5mfj
50+
jinja2==3.1.4
4951

5052
# Reset and copy updated files with updated privs to keep image size down
5153
FROM mcr.microsoft.com/devcontainers/base:1-bullseye

src/anaconda/test-project/test.sh

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -52,6 +52,7 @@ checkPythonPackageVersion "jupyterlab" "4.0.11"
5252
checkPythonPackageVersion "gitpython" "3.1.41"
5353
checkPythonPackageVersion "jupyter-lsp" "2.2.2"
5454
checkPythonPackageVersion "idna" "3.7"
55+
checkPythonPackageVersion "jinja2" "3.1.4"
5556

5657
checkCondaPackageVersion "pyopenssl" "23.2.0"
5758
checkCondaPackageVersion "requests" "2.31.0"

0 commit comments

Comments
 (0)