-
Notifications
You must be signed in to change notification settings - Fork 188
Closed
Labels
type: choreChanges to the build process or auxiliary tools and libraries such as documentation generationChanges to the build process or auxiliary tools and libraries such as documentation generation
Description
Describe the bug
Aiohttp 3.8.0 adds validation of HTTP header keys and values to prevent header injection
AFFECTED VERSIONS: <3.8.0
FIXED VERSIONS: 3.8.0
more about the vulnerability: https://pyup.io/vulnerabilities/PVE-2021-42692/42692/
To Reproduce
On any poetry python project, do following commands
clone https://github.com/eccenca/cmem-plugin-graphql
- cd cmem-plugin-graphql
- git checkout feature/mutationSupport-ECC-5299
- task poetry:install
- task check:safetyExpected behavior
on poetry run safety check all safety checks should pass.
System info:
- OS: macOS 13.1
- Python version: Python 3.9.6
- gql version:
gql 3.4.0 GraphQL client for Python
├── aiohttp >=3.7.1,<3.9.0 - graphql-core version: graphql-core >=3.2,<3.3
Metadata
Metadata
Assignees
Labels
type: choreChanges to the build process or auxiliary tools and libraries such as documentation generationChanges to the build process or auxiliary tools and libraries such as documentation generation