vonage-python-code-snippets icon indicating copy to clipboard operation
vonage-python-code-snippets copied to clipboard

Update dependency idna to v3 (main)

Open mend-for-github-com[bot] opened this issue 1 year ago • 0 comments

This PR contains the following updates:

Package Update Change
idna (changelog) major ==2.7 -> ==3.7

By merging this PR, the issue #220 will be automatically resolved and closed:

Severity CVSS Score CVE Reachability
High High 7.5 CVE-2024-3651

Release Notes

kjd/idna (idna)

v3.7

Compare Source

What's Changed

  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Full Changelog: https://github.com/kjd/idna/compare/v3.6...v3.7

v3.6

Compare Source

v3.5

Compare Source

v3.4

Compare Source

v3.3

Compare Source

v3.2

Compare Source

v3.1

Compare Source

v3.0

Compare Source

v2.10

Compare Source

v2.9

Compare Source

v2.8

Compare Source


  • [ ] If you want to rebase/retry this PR, check this box