CVE-2021-33503

Advisory

Git-vuln-finder 1.3 updates its dependency 'urllib3' to v1.26.5 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Changes

* [doc] usage updated. [Alexandre Dulaunoy]

Fix

* [patterns] as reported in 16 - a typo of the typo for 'vulnerability' was not in the pattern. [Alexandre Dulaunoy]

Other

* Merge pull request 15 from cve-search/dependabot/pip/urllib3-1.26.5. [Alexandre Dulaunoy]

build(deps): bump urllib3 from 1.25.10 to 1.26.5

* Build(deps): bump urllib3 from 1.25.10 to 1.26.5. [dependabot[bot]]

Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.25.10 to 1.26.5.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/1.25.10...1.26.5)

---
updated-dependencies:
- dependency-name: urllib3
dependency-type: indirect
...

* Merge pull request 14 from adulau/master. [Alexandre Dulaunoy]

dep updates

* Merge pull request 1 from adulau/dependabot/pip/py-1.10.0. [Alexandre Dulaunoy]

build(deps): bump py from 1.8.1 to 1.10.0

* Build(deps): bump py from 1.8.1 to 1.10.0. [dependabot[bot]]

Bumps [py](https://github.com/pytest-dev/py) from 1.8.1 to 1.10.0.
- [Release notes](https://github.com/pytest-dev/py/releases)
- [Changelog](https://github.com/pytest-dev/py/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/py/compare/1.8.1...1.10.0)

---
updated-dependencies:
- dependency-name: py
dependency-type: indirect
...

* Merge pull request 13 from cydave/master. [Alexandre Dulaunoy]

fix links to patterns

* Fix links to patterns. [dave]

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33503