Latest Alerta has high CVEs related to the usage of older python version

[srikarsistlas30]

Select Topic Area

General

Body

HI, We have been using the alerta 9.0.4 which is the latest version but we see below issues with the python version 2.7.6 and 3.7.3. Is there a solution that someone can suggest?

<style> </style>

CVE-2024-7592	https://nvd.nist.gov/vuln/detail/CVE-2024-7592	There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module.   When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.	python	3.7.3
CVE-2019-15903	https://nvd.nist.gov/vuln/detail/CVE-2019-15903	In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.	python	3.7.3
CVE-2024-7592	https://nvd.nist.gov/vuln/detail/CVE-2024-7592	There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module.   When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.	python	3.9.17
CVE-2019-15903	https://nvd.nist.gov/vuln/detail/CVE-2019-15903	In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.	python	2.7.16
CVE-2024-7592	https://nvd.nist.gov/vuln/detail/CVE-2024-7592	There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module.   When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.	python	2.7.16
CVE-2024-7592	https://nvd.nist.gov/vuln/detail/CVE-2024-7592	There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module.   When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.	/usr/lib/python2.7/lib-dynload	python
CVE-2019-15903	https://nvd.nist.gov/vuln/detail/CVE-2019-15903	In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.	/usr/lib/python2.7/lib-dynload	python