Details
-
Bug
-
Status: Resolved
-
P1
-
Resolution: Fixed
-
2.23.0, 2.35.0, 2.36.0
-
None
Description
We are using apache-beam[gcp]==2.23.0 and apache-beam=2.36.0.
The following vulnerabilities are detected in white source with apache-beam.
CVE-2020-13091 - pandas-0.25.3-cp37-cp37m-manylinux1_x86_64.whl - Fix(Upgrade to version pandas - 0.3.0.beta,1.0.4;autovizwidget - 0.12.7;pandas - 1.0.4,1.1.0rc0)
CVE-2021-41496 - numpy-1.21.5-cp37-cp37m-manylinux_2_12_x86_64.manylinux2010_x86_64.whl - Fix(Upgrade to version autovizwidget - 0.12.7;numpy - 1.22.0rc1;numcodecs - 0.6.2;numpy-base - 1.11.3;numpy - 1.17.4)
CVE-2021-21240 -httplib2-0.17.4-py3-none-any.whl - Fix(Upgrade to version v0.19.0)
See attached xls - tensorflow-1.14.0-cp37-cp37m-manylinux1_x86_64.whl - Fix(attached xls)
please upgrade the packages to the mentioned versions with fix.
Attachments
Attachments
Issue Links
- links to