Resolved CVE-2022-23491 (#381)

swar · Oct 7, 2023 · 33ddb96 · 33ddb96
1 parent 82865e0
commit 33ddb96
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 5 deletions.
diff --git a/CHANGELOG.MD b/CHANGELOG.MD
@@ -20,7 +20,8 @@
 Date: TBD
 
 ### Security
-Set minimum requirement for [requests](https://pypi.org/project/requests/) to 2.31 per [CVE-2023-32681](https://www.cve.org/CVERecord?id=CVE-2023-32681) / [CWE-200](https://cwe.mitre.org/data/definitions/200.html) 
+- Set minimum requirement for [requests](https://pypi.org/project/requests/) to 2.31 per [CVE-2023-32681](https://www.cve.org/CVERecord?id=CVE-2023-32681) / [CWE-200](https://cwe.mitre.org/data/definitions/200.html) 
+- Set minimum requirement for [certifi](https://pypi.org/project/certifi/) to 2022.12.07 per [CVE-2022-23491](https://www.cve.org/CVERecord?id=CVE-2022-23491) / [CWE-345](https://cwe.mitre.org/data/definitions/345.html) 
 
 ## v1.3.0
 

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -30,6 +30,7 @@ classifiers = [
 python = "^3.8"
 requests = "^2.31"
 numpy = "^1.22.2"
+certifi = "^2022.12.07"
 
 [tool.poetry.urls]
 "Bug Tracker" = "https://github.com/swar/nba_api/issues"