Hello - dependabot is flagging a critical vulnerab...
# releases
d
Hello - dependabot is flagging a critical vulnerability in
nltk
package that is used by
airbyte-cdk
. I see that an issue has been raised (here) and PR with a fix is here. Does anyone know when a new version of
airbyte-cdk
will be released including this fix?
👀 2
Hello again 👋 any update from the Airbyte team on when the PR to resolve this critical vulnerability in
airbyte-cdk
will be merged and released?
Hello Airbyte team 👋 this critical vulnerability fix has still not been merged... in the meantime we have resorted to maintaining our own
airbyte-cdk
fork so that we can resolve vulnerabilities in our custom connectors without having a dependency on the Airbyte team. Is there any way we can release these security fixes faster?
👀 1
r
Looking into this one
We just updated so that you can target 3.9.4: github.com/airbytehq/PyAirbyte/pull/1133
d
great thank you 🙏