googleapis / googleapis/python-aiplatform
Security Vulnerability with Werkzeug 2.0.0
Đang mở
api: vertex-ai
- Ngôn ngữ chính
- Python
- Star
- 905
- Fork
- 465
- Merge trung bình
- 1 ngày 13 giờ
- Pull request đã merge (30 ngày)
- 44
Mô tả
#### Environment details
- OS type and version: N/A
- Python version: `python --version` N/A
- pip version: `pip --version` N/A
- `google-cloud-aiplatform` version: v1.76.0 (and earlier)
#### Description
There are several security vulnerabilities with Werkzeug 2.0.0 which is a strict dependency in google-cloud-aiplatform[tensorboard]
https://github.com/googleapis/python-aiplatform/blob/26a08c7c37762b3661631cf40424118e6a22ef1b/setup.py#L51
Is it possible to update Werkzeug to resolve these? Thanks!
Link to vulnerabilities:
- https://nvd.nist.gov/vuln/detail/cve-2024-34069
- https://nvd.nist.gov/vuln/detail/cve-2023-25577
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.