You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi, @ungarj , I'd like to report a vulnerability issue in mapchete_2022.4.0.
Issue Description
I noticed that mapchete_2022.4.0 directly depends on rasterio_1.2.10.
However, rasterio_1.2.10 sufferes from the vulnerabilites which the C libraries exposed as following dependency graph shows.
Dependency Graph between Python and Shared Libraries
Suggested Vulnerability Patch Versions
rasterio has upgraded these vulnerable C libraries to patch versions refer to issue url.
Python build tools cannot report vulnerable C libraries, which may induce potential security issues to many downstream Python projects.
As a popular python package (mapchete has 7,993 downloads per month), could you please upgrade this vulnerable dependency?
Thanks for your help~
Best regards,
Joe Gardner
The text was updated successfully, but these errors were encountered:
Hi, @ungarj , I'd like to report a vulnerability issue in mapchete_2022.4.0.
Issue Description
I noticed that mapchete_2022.4.0 directly depends on rasterio_1.2.10.
However, rasterio_1.2.10 sufferes from the vulnerabilites which the C libraries exposed as following dependency graph shows.
Dependency Graph between Python and Shared Libraries
Suggested Vulnerability Patch Versions
rasterio has upgraded these vulnerable C libraries to patch versions refer to issue url.
Python build tools cannot report vulnerable C libraries, which may induce potential security issues to many downstream Python projects.
As a popular python package (mapchete has 7,993 downloads per month), could you please upgrade this vulnerable dependency?
Thanks for your help~
Best regards,
Joe Gardner
The text was updated successfully, but these errors were encountered: