[
https://issues.apache.org/jira/browse/BEAM-13876?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17490426#comment-17490426
]
Kenneth Knowles commented on BEAM-13876:
----------------------------------------
CC [~tvalentyn]
> Beam Dependency Update Request: numpy
> -------------------------------------
>
> Key: BEAM-13876
> URL: https://issues.apache.org/jira/browse/BEAM-13876
> Project: Beam
> Issue Type: Improvement
> Components: dependencies
> Affects Versions: 2.36.0
> Reporter: Adam Crawshaw
> Priority: P2
>
> Consider bumping numpy package version requirement >= 1.22.0
> currently set at 'numpy>=1.14.3,<1.22.0',
> see: [NVD - CVE-2021-34141
> (nist.gov)|https://nvd.nist.gov/vuln/detail/CVE-2021-34141]
--
This message was sent by Atlassian Jira
(v8.20.1#820001)