You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
jacobwoffenden
changed the title
📖 Investigate updating python dependancy in Control panel
📖 Investigate updating python dependency in Control panel
Dec 6, 2024
User Story
Investigate a fix or replacement for the dependancy python-jose 3.3.0 https://github.com/ministryofjustice/analytics-platform-control-panel/blob/bb318f1409292e356b88619a7cbd4c267e20fe6c/requirements.txt#L34
Value / Purpose
This package was identified as a critical vulnerability by trivy scan details found here https://nvd.nist.gov/vuln/detail/CVE-2024-33664
Attempted to downgrade to 3.2.0 but this was also flagged by workflows as affected
This dependancy is abandonware so no available fix at present
Useful Contacts
No response
User Types
No response
Hypothesis
If we... [do a thing]
Then... [this will happen]
Proposal
No response
Additional Information
No response
Definition of Done
Example - [ ] Documentation has been written / updated
The text was updated successfully, but these errors were encountered: