Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update numpy version due to CVE-2021-41495 and others #769

Merged
merged 1 commit into from
Sep 7, 2023

Conversation

aurianer
Copy link
Contributor

@aurianer aurianer commented Sep 7, 2023

Following the report for the pika repo on app.snyk.io, this aims at fixing 3 low severity CVEs: CVE-2021-41495, CVE-2021-34141, CVE-2021-41496

@aurianer aurianer added this to the 0.19.0 milestone Sep 7, 2023
@aurianer aurianer self-assigned this Sep 7, 2023
@msimberg
Copy link
Contributor

msimberg commented Sep 7, 2023

Would you mind linking or pasting some more context to this? Where does the report come from?

@aurianer
Copy link
Contributor Author

aurianer commented Sep 7, 2023

I temporarily enabled the scan of the pika repo on app.snyk.io, let me know if you cannot access the report but I think that you should be able to

@aurianer
Copy link
Contributor Author

aurianer commented Sep 7, 2023

I changed it to greater equal as @msimberg suggested and I tested it, let's see if snyk is happy once it's merged :)

@msimberg msimberg merged commit 5ddb900 into pika-org:main Sep 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

2 participants