Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Python 3.12 support #353

Open
mSiotniHS opened this issue Aug 1, 2024 · 1 comment
Open

Python 3.12 support #353

mSiotniHS opened this issue Aug 1, 2024 · 1 comment

Comments

@mSiotniHS
Copy link

Currently PyFCM lists aiohttp==3.8.6 as a required dependency, however such version of the aiohttp library does not support Python 3.12. aiohttp of version 3.9.0 does support Python 3.12. Is it possible to bump aiohttp's version listed in the setup.py or change the versioning from strict match to be at least 3.8.6 (meaning setting aiohttp>=3.8.6)?

@dsiddiqui-wavefin
Copy link

Any updates on this, since aiohttp has a lot of vulnerability as well, I want to upgrade aiohttp to the latest one but I am blocked by the pyfcm version pinning.

Following are the vulnerabilities for aiohttp:

aiohttp CVE-2024-30251 high 3.8.6 3.9.4
aiohttp CVE-2024-23334 high 3.8.6 3.9.2
aiohttp CVE-2023-49081 medium 3.8.6 3.9.0
aiohttp CVE-2024-27306 medium 3.8.6 3.9.4
aiohttp CVE-2023-49082 medium 3.8.6 3.9.0
aiohttp CVE-2024-23829 medium 3.8.6 3.9.2
aiohttp CVE-2024-30251 high 3.8.6 3.9.4
aiohttp CVE-2024-23334 high 3.8.6 3.9.2
aiohttp CVE-2023-49081 medium 3.8.6 3.9.0
aiohttp CVE-2024-27306 medium 3.8.6 3.9.4
aiohttp CVE-2023-49082 medium 3.8.6 3.9.0
aiohttp CVE-2024-23829 medium 3.8.6 3.9.2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants