Skip to content

Commit f1a9807

Browse files
author
Glenn Snyder
committed
adding warning regarding CVE-2020-27589
1 parent 4823118 commit f1a9807

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

README.md

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,12 @@
11
## Overview ##
2+
23
The hub-rest-api-python provides Python bindings for Hub REST API.
34

4-
## To use
5+
:warning:Recently CVE-2020- 27589, a medium severity security defect, was discovered in the [blackduck PyPi](https://pypi.org/project/blackduck/) library which affects versions 0.0.25 – 0.0.52 that could suppress certificate validation if the calling code used either the upload_scan or download_project_scans methods. These methods did not enforce certificate validation. Other methods in the library are not affected. The defect was fixed in version 0.0.53.
6+
7+
Customers using the [blackduck library](https://pypi.org/project/blackduck/) should upgrade to version 0.0.53, or later, to implement the fix.
8+
9+
## To use ##
510

611
```
712
pip install blackduck

0 commit comments

Comments
 (0)