Skip to content

Commit 9b7a28d

Browse files
Address security risk in futures<0.18.2
Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server. https://github.com/PythonCharmers/python-future/blob/master/src/future/backports/http/cookiejar.py#L215 python/cpython#17157
1 parent 84dafef commit 9b7a28d

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

Pipfile

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,7 @@ fixtures = "==3.0.0"
2828
flake8 = "==3.8.3"
2929
funcsigs = "==1.0.2"
3030
futures = "==3.1.1"
31+
future = "==0.18.2"
3132
dj_pagination = "==2.4.0"
3233
linecache2 = "==1.0.0"
3334
lxml = "==4.8.0"

0 commit comments

Comments
 (0)