Build: #5 failed

Job: ZZ - Check For Known Vulnerabilities ManyLinux2014 Python 3.10 failed

V 22 3 1: Test case result

The below summarizes the result of the test "V 22 3 1" in build 5 of CASA - Release Engineering Cmake Package Audit - Vulnerability - Check For Known Vulnerabilities ManyLinux2014 Python 3.10. View test case history
Description
V 22 3 1
Test class
pip
Method
v_22_3_1
Duration
< 1 sec
Status
Failed (New Failure)

Error Log

When installing a package from a Mercurial VCS URL  (ie pip install  hg+...) with pip prior to v23.3 the specified Mercurial revision could  be used to inject arbitrary configuration options to the hg clone  call (ie --config). Controlling the Mercurial configuration can modify  how and which repository is installed. This vulnerability does not  affect users who arent installing from Mercurial. 
When installing a package from a Mercurial VCS URL  (ie pip install  hg+...) with pip prior to v23.3 the specified Mercurial revision could  be used to inject arbitrary configuration options to the hg clone  call (ie --config). Controlling the Mercurial configuration can modify  how and which repository is installed. This vulnerability does not  affect users who arent installing from Mercurial.