Skip to content

Upgrade pyasn1 to patched version#179

Open
lfarrel6 wants to merge 2 commits into
masterfrom
liam/patch-pyasn1
Open

Upgrade pyasn1 to patched version#179
lfarrel6 wants to merge 2 commits into
masterfrom
liam/patch-pyasn1

Conversation

@lfarrel6

Copy link
Copy Markdown
Member

Why

pyasn1 has a vulnerability in decoding which is patched in 0.6.4, there is no impact to this SDK. This patch is primarily for good hygeine.

How

Patch pyasn1 to 0.6.4

@lfarrel6
lfarrel6 requested a review from a team as a code owner July 24, 2026 21:19
@changeset-bot

changeset-bot Bot commented Jul 24, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 3a70582

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
evervault-python Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@socket-security

socket-security Bot commented Jul 24, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpypi/​pyasn1@​0.6.3 ⏵ 0.6.4100100 +22100100100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant