idealista/prom2teams

[FEATURE] Upgrade Werkzeug to fix cve-2022-29361

ebini opened this issue · 1 comments

ebini commented

Description

Please Fix security Issue. The current Version 4.2.0 with trivy scanner reports:

https://avd.aquasec.com/nvd/cve-2022-2936

Fixed Version:      2.1.1                                                                                                                                                                                                                                                                           Installed Version:  0.16.1                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
Primary Link:       https://avd.aquasec.com/nvd/cve-2022-29361                                                                                                                                                                                                                                  
Resource:           Werkzeug                                                                                                                                                                                                                                                                    
Score:              9.8                                                                                                                                                                                                                                                                         
Severity:           CRITICAL                                                                                                                                                                                                                                                                    

Thanks
Florian

stale commented

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.