CVE-2021-37701

Advisory

Jupytext 1.11.5 updates its NPM dependency 'tar' to v6.1.11 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

-------------------

**Fixed**
- Fixed typos revealed by `codespell` - thanks to hectormz for this contribution ([829](https://github.com/mwouts/jupytext/issues/829))
- We updated the dependencies of the `jupyterlab-jupytext` extension to address several security issues ([842](https://github.com/mwouts/jupytext/issues/842)) ([#843](https://github.com/mwouts/jupytext/issues/843))
- The Jupytext dev environment (`requirements-dev.txt`) now uses `jupyterlab==3.0.17` rather than `3.0.0` because of another security issue ([839](https://github.com/mwouts/jupytext/issues/839))

Resources

• https://pypi.org/project/jupytext
• https://pyup.io/changelogs/jupytext/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37701