You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@beam.apache.org by "Adam Crawshaw (Jira)" <ji...@apache.org> on 2022/02/10 09:18:00 UTC

[jira] [Created] (BEAM-13876) Beam Dependency Update Request: numpy

Adam Crawshaw created BEAM-13876:
------------------------------------

             Summary: Beam Dependency Update Request: numpy
                 Key: BEAM-13876
                 URL: https://issues.apache.org/jira/browse/BEAM-13876
             Project: Beam
          Issue Type: Improvement
          Components: dependencies
    Affects Versions: 2.36.0
            Reporter: Adam Crawshaw


Consider bumping numpy package version requirement >= 1.22.0

currently set at 'numpy>=1.14.3,<1.22.0',

see: [NVD - CVE-2021-34141 (nist.gov)|https://nvd.nist.gov/vuln/detail/CVE-2021-34141]



--
This message was sent by Atlassian Jira
(v8.20.1#820001)