Fixed vulnerabilities by updating dependencies (#37)

* Fixed vulnerabilities by updating dependencies * Added direct dependency to pytest-exasol-itde * Updated import statements * Updated dependencies incl library requests * Updated changelog * Apply suggestions from code review Co-authored-by: Torsten Kilias <[email protected]>
exasol · Jul 11, 2024 · e11ee86 · e11ee86
1 parent a371819
commit e11ee86
Show file tree

Hide file tree

Showing 5 changed files with 220 additions and 186 deletions.
diff --git a/doc/changes/unreleased.md b/doc/changes/unreleased.md
@@ -1 +1,7 @@
 # Unreleased
+
+## Security Issues
+
+* Fixed vulnerabilities by updating dependencies
+  * Vulnerability CVE-2024-21503 in transitive dependency via `exasol-toolbox` to `black` in versions below `24.3.0`
+  * Vulnerability CVE-2024-35195 in dependency `requests` in versions below `2.32.0` caused by requests `Session` object not verifying requests after making first request with `verify=False`