Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security vulnerability on the "future" dependency #88

Closed
Ash-Crow opened this issue Jan 5, 2023 · 3 comments
Closed

Security vulnerability on the "future" dependency #88

Ash-Crow opened this issue Jan 5, 2023 · 3 comments

Comments

@Ash-Crow
Copy link

Ash-Crow commented Jan 5, 2023

There is a security vulnerability with high severity on future, which is a dependency of this project.

Per the discussion there PythonCharmers/python-future#612, it seems that the project is more or less dead, and the PR to fix this vulnerability has now been opened for two weeks.

As future only exists to maintain compatibility with python2.7, which itself has been officially EOL'd for 3 years now, perhaps it is the occasion for this project to drop python2 compatibility at all?

@MarjanaVoronina
Copy link

Same issue here. Would be nice to drop Python 2 support.

@mpcabd
Copy link
Owner

mpcabd commented Jan 10, 2023

I'll release a new version without the future dependency and py2 support. Thanks for flagging this.

@mpcabd
Copy link
Owner

mpcabd commented Jan 10, 2023

v3.0.0 released.

@mpcabd mpcabd closed this as completed Jan 10, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants