Critical vulnerability in tap-chargebee dependency urllib3
#108
Comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
{{ message }}
Critical vulnerability in tap-chargebee dependency
Hi there
Versions of
urllib3before version 1.23 have a critical vulnerability: https://nvd.nist.gov/vuln/detail/cve-2018-20060.The current version of
urllibinstalled by tap-chargebee is 1.22. Updating to the next minor version will fix the vulnerability. Is it possible to upgrade?Kind regards
Ben
The text was updated successfully, but these errors were encountered: