[jira] [Created] (BEAM-13876) Beam Dependency Update Request: numpy

Thu, 10 Feb 2022 01:18:06 -0800 

Adam Crawshaw created BEAM-13876:
------------------------------------

             Summary: Beam Dependency Update Request: numpy
                 Key: BEAM-13876
                 URL: https://issues.apache.org/jira/browse/BEAM-13876
             Project: Beam
          Issue Type: Improvement
          Components: dependencies
    Affects Versions: 2.36.0
            Reporter: Adam Crawshaw


Consider bumping numpy package version requirement >= 1.22.0

currently set at 'numpy>=1.14.3,<1.22.0',

see: [NVD - CVE-2021-34141 
(nist.gov)|https://nvd.nist.gov/vuln/detail/CVE-2021-34141]



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to