Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 27 May 2024 13:34:28 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 279350] devel/py-Jinja2 vulnerable GHSA-h75v-3vvj-5mfj CVE-2024-34064
Message-ID:  <bug-279350-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D279350

            Bug ID: 279350
           Summary: devel/py-Jinja2 vulnerable GHSA-h75v-3vvj-5mfj
                    CVE-2024-34064
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: nivit@FreeBSD.org
          Reporter: void@f-m.fm
          Assignee: nivit@FreeBSD.org
             Flags: maintainer-feedback?(nivit@FreeBSD.org)

Hi,

3.1.3 in ports tree is vulnerable
see
https://github.com/advisories/GHSA-h75v-3vvj-5mfj
https://nvd.nist.gov/vuln/detail/CVE-2024-34064

this is not in vulnxml. 3.1.4 is available. please update

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-279350-7788>