Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

aiohttp bump in version #82

Open
JDJGInc opened this issue Oct 3, 2024 · 3 comments
Open

aiohttp bump in version #82

JDJGInc opened this issue Oct 3, 2024 · 3 comments
Labels
unconfirmed bug Something isn't working

Comments

@JDJGInc
Copy link

JDJGInc commented Oct 3, 2024

I get an aiohttp warning on the project asking for 3.10.2 or higher due to a possible security problem.
This is why I am requesting to update it.

This appears to only happen on servers as it mentions it in:

"In aiohttp, compressed files as symlinks are not protected from path traversal"

But this is better to be bumped if possible.

lastest git version.

@JDJGInc JDJGInc added the unconfirmed bug Something isn't working label Oct 3, 2024
@JDJGInc
Copy link
Author

JDJGInc commented Oct 4, 2024

the image version:
image

@stafsa
Copy link

stafsa commented Oct 23, 2024

which os are you using?

@JDJGInc
Copy link
Author

JDJGInc commented Oct 24, 2024

ubuntu 22.04 LTS 64 bit.
why do you ask?
this isn't related to operating system but more related to aiohttp version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
unconfirmed bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants