Upgrade anyio 4.11.0 → 4.14.2 (1 CVE) #523

New issue

Copy link

New issue

Copy link

Closed

#528

Closed

Upgrade anyio 4.11.0 → 4.14.2 (1 CVE)#523

#528

Copy link

Labels

dependenciesPull requests or issues about dependency versions, extras, or packagingPull requests or issues about dependency versions, extras, or packagingsecuritySecurity-related issuesSecurity-related issuesvulnerabilityDependency vulnerabilityDependency vulnerability

Description

nthmost-orkes

opened on Oct 20, 2026

Issue body actions

Sub-issue of #519 (P0 — TLS spoofing). Surfaced by the Conductor OSS CVE scan (target python-sdk).

Upgrade anyio 4.11.0 → 4.14.2 clears:

• CVE-2026-63374 — TLS certificate spoofing via improper IDN encoding (critical)

Reactions are currently unavailable

Activity

1. nthmost-orkes

   added

   securitySecurity-related issuesSecurity-related issues

   vulnerabilityDependency vulnerabilityDependency vulnerability

   dependenciesPull requests or issues about dependency versions, extras, or packagingPull requests or issues about dependency versions, extras, or packaging

   on Oct 20, 2026
2. nthmost-orkes

   added a parent issue on Oct 20, 2026

   • Security: dependency CVEs from 2026-10-07 scan (2 critical, 14 high) #519
3. nthmost-orkes

   closed this as completedin #528on Oct 20, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

Labels

dependenciesPull requests or issues about dependency versions, extras, or packagingPull requests or issues about dependency versions, extras, or packagingsecuritySecurity-related issuesSecurity-related issuesvulnerabilityDependency vulnerabilityDependency vulnerability

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

• Open in GitHub Copilot app