Fixed
-
Fixed an issue where audits done with the PyPI vulnerability service (the
default) were not correctly filtered by "withdrawn" status; "withdrawn"
vulnerabilities are now excluded
(#393) -
Fixed an issue where audits done with the OSV vulnerability service (
-s osv
)
were not correctly filtered by "withdrawn" status; "withdrawn" vulnerabilities
are now excluded (#386) -
Fixed
pip-audit
's handling of URL-style requirements in--no-deps
mode
(URL requirements are now treated as skipped, rather than producing
an error due to a lack of pinning)
(#395)