davitmamrikishvili
released this
10 Jun 07:26
·
1 commit
to release-3.1
since this release
User impact and migration instructions
- [I] new version of
orjson
&aiohttp
lib require python 3.8+.
[M] Change your python version if you use 3.7 to 3.8+.
BugFixes
- [TH2-5191] - The following commands
GetEventScopes
,GetMessageAliases
,
GetMessageGroups
return list of lists instead of a single list. - [TH2-5193] - orjson versions 3.7.0 through 3.9.14 library has vulnerability
https://devhub.checkmarx.com/cve-details/CVE-2024-27454/.
Updated to >=3.10,<4. - [TH2-5193] - aiohttp library versions < 3.9.4 have vulnerability
https://security.snyk.io/package/pip/aiohttp.
Updated to >=3.9.5,<4.