Repository navigation
vulnerability in libuv v1.46.0 #615
Description
- uvloop version: 0.19.0
- Python version: 3.11
- Platform: linux
- Can you reproduce the bug with
PYTHONASYNCIODEBUGin env?: n/a - Does uvloop behave differently from vanilla asyncio? How?: n/a
uvloop uses libuv v1.46.0, which has a security vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-24806
the vulnerability was fixed in libuv v1.48.0 but uvloop is still using v1.46.0.
Activity
fantix commentedon Aug 14, 2024
#600 would fix this
javaccar commentedon Aug 15, 2024
Thanks @fantix ! Appreciate the quick response. I see #600 was just merged. Plans to cut a release and publish to pypi?
fantix commentedon Aug 15, 2024
No problem! Yes, I'll cut it tomorrow.
uvloop 0.20.0