CVE-2022-37603

Advisory

Dash-extensions 0.1.8 updates its NPM dependency 'loader-utils' to v3.2.1 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Changed

- Bump a number of npm packages to address security issues
- Change callback context of `BlockingCallbackTransform` callbacks to reflect the original trigger
- Add `priority` keyword argument for callbacks that makes it possible to select which callbacks take precedence, when multiple callbacks target the same output simultaneously using the `MultiplexerTransform`
- Add support for the unittest syntax [introduced with Dash 2.6](https://dash.plotly.com/testing)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37603