CVE-2018-20060

Advisory

Ansys-tools-repo-sync 0.1.17 updates its dependency 'urllib3' to v1.26.9 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* Upgrade packages version to fix vulnerabilities from urlllib3. by MaxJPRey in https://github.com/ansys/ansys-tools-repo-sync/pull/150
* Add dependabot. by MaxJPRey in https://github.com/ansys/ansys-tools-repo-sync/pull/154
* Bump sphinx-copybutton from 0.4.0 to 0.5.0 by dependabot in https://github.com/ansys/ansys-tools-repo-sync/pull/158
* Bump sphinx from 4.5.0 to 5.1.1 by dependabot in https://github.com/ansys/ansys-tools-repo-sync/pull/175
* Bump pytest from 7.1.2 to 7.1.3 by dependabot in https://github.com/ansys/ansys-tools-repo-sync/pull/177
* Bump codespell from 2.1.0 to 2.2.1 by dependabot in https://github.com/ansys/ansys-tools-repo-sync/pull/176
* Pip option was deprecated. by MaxJPRey in https://github.com/ansys/ansys-tools-repo-sync/pull/179
* Add an argument to specify the name of the branch to check out. by MaxJPRey in https://github.com/ansys/ansys-tools-repo-sync/pull/178

New Contributors
* dependabot made their first contribution in https://github.com/ansys/ansys-tools-repo-sync/pull/158

**Full Changelog**: https://github.com/ansys/ansys-tools-repo-sync/compare/v0.1.16...v0.1.17

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20060