Repository navigation
Data quality issue with GHSA-9wx4-h78v-vm56 #2251
Description
The CVE ID
https://osv.dev/vulnerability/GHSA-9wx4-h78v-vm56
https://osv.dev/vulnerability/CVE-2024-35195
Describe the data quality issue observed
The record states it's fixed in 2.32.0, but that version has been yanked from PyPi. Version 2.32.2 is the first (and currently only) version with a fix for this issue.
Suggested changes to record
Update the fix version to be 2.32.2 instead.
Additional context
https://pypi.org/project/requests/#history
renovatebot/renovate#29280
Activity
github-actions commentedon May 29, 2024
✨ Thank you for your interest in OSV.dev's data quality! ✨ Please review our FAQ entry on how to most efficiently have this addressed.
[-]Data quality issue with CVE-2024-35195[/-][+]Data quality issue with GHSA-9wx4-h78v-vm56[/+]astellingwerf commentedon May 29, 2024
I'm all new to the OSV processes. 15 minutes after this submission, I discovered that the GHSA entry has the option to submit approval, which I did: github/advisory-database#4468. If it gets incorporated, I assume we can close this issue?
Improve multiline formatting
Improve multiline formatting in issue automation (#2253)
andrewpollock commentedon May 29, 2024
Based on the response to your suggested fix for the source record, it sounds like it's correct, so I'm going to close this issue.