Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update fastapi due to vulnerability. #70

Merged
merged 1 commit into from
Feb 7, 2024
Merged

Update fastapi due to vulnerability. #70

merged 1 commit into from
Feb 7, 2024

Conversation

busykoala
Copy link
Owner

Purpose

To mitigate CVE-2024-24762,
we need to update FastAPI. This update necessitates discontinuing support for
Python 3.7.

Approach

To ensure our FastAPI dependency is secure, we've pinned it to a version that
addresses the vulnerability. However, this version also discontinues support
for Python 3.7, requiring us to do the same.

Checklist for PRs

  • There is a Changelog (/CHANGELOG.md)
  • Version was adapted if necessary (/pyproject.toml)
  • I tested the feature if necessary (unittests, manual testing)
  • If libraries aren't used for all package usages they are extras
  • I documented the changes

Updating fastapi fixes [CVE-2024-24762](GHSA-qf9m-vfgh-m389).
The update requires dropping Python 3.7 support as a result.
@busykoala busykoala self-assigned this Feb 7, 2024
@busykoala busykoala merged commit 4953bbd into main Feb 7, 2024
10 checks passed
@busykoala busykoala deleted the mo/cwe-fastapi branch February 7, 2024 22:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant