kactus2dev icon indicating copy to clipboard operation
kactus2dev copied to clipboard

Python version 3.10.6 has known critical vulnerabilities

Open HristoDimitrov opened this issue 1 year ago • 1 comments

Hello,

Would it be possible to have the version of the included Python updated to one of the latter versions that have no known critical vulnerabilities? The version 3.10.6 is being flagged on my Windows machine and using it would be forbidden due to IT restrictions.

For reference table of the latest Python versions and their vulnerabilities status: https://maikuolan.github.io/Vulnerability-Charts/python.html

Thanks!

HristoDimitrov avatar Nov 05 '24 17:11 HristoDimitrov

Hi, Thank you for bringing this issue up, we are aware that the bundled python version is old. We can update the included python in the next release. We are also currently looking into allowing user installed python to be used (by making included python optional in the installer) and allowing Kactus2 to be run without python, just with CLI mode and in-editor python scripting disabled.

hagantsa avatar Nov 15 '24 10:11 hagantsa