New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Address CVE-2023-40590 #126

Closed

1 task done

roskakori opened this issue Aug 30, 2023 · 1 comment

Assignees

Labels

bug

Milestone

Owner

roskakori commented Aug 30, 2023 •

edited

Loading

Goals

CVE-2023-40590 is addressed in a meaningful way.

Background

Running git via gitpython can result in evil things on Windows. See https://github.com/roskakori/pygount/security/dependabot/14

roskakori added the bug label

roskakori added this to the v1.6.2 milestone

roskakori self-assigned this

Owner Author

roskakori commented Sep 6, 2023

Solved by upgrading to gitpython 3.1.33+. See gitpython-developers/GitPython#1636.

roskakori closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment