adarshbilimagga

Is there way to remove critical Vulnerability for curl 7.85.0

1

Trying to install tensorflow version 2.17.0 and curl is getting installed of version 7.85.0 which is outdated. Having security vulnerabilities for tensorflow-io-gcs-filesystem/tensorflow_io_gcs_filesystem-0.31.0-cp310-cp310-win_amd64.whl. Getting below vulnerabilities: CVE-2023-38545 CVE-2022-32221 CVE-2023-28319 CVE-2023-38039 CVE-2023-27533...

Windows Wheel file doesn't exist for tensorflow_io_gcs_filesystem library for the latest version pip install tensorflow-io-gcs-filesystem==0.37.1.

3

if we install -> pip install tensorflow-io-gcs-filesystem==0.37.1 it will always download the wheel file of older version of [tensorflow_io_gcs_filesystem-0.31.0-cp311-cp311-win_amd64.whl ](https://files.pythonhosted.org/packages/ac/4e/9566a313927be582ca99455a9523a097c7888fc819695bdc08415432b202/tensorflow_io_gcs_filesystem-0.31.0-cp311-cp311-win_amd64.whl)(1.5 MB [view hashes](https://pypi.org/project/tensorflow-io-gcs-filesystem/0.31.0/#copy-hash-modal-5a9e9ff6-6e95-4cec-940e-ae66d32efe0c))