Fixing CVE-2022-42731 for v2.5

CHANGELOG.md

@@ -1,5 +1,5 @@
 # Change Log
-## 2.5.1
+## 2.5.2
 * Fix: CVE-2022-42731: related to possibility of registration replay attack thanks to 'SSE (Secure Systems Engineering)' 
    
 ## 2.5.0

mfa/FIDO2.py

@@ -57,7 +57,7 @@ def complete_reg(request):
         att_obj = AttestationObject((data['attestationObject']))
         server = getServer()
         auth_data = server.register_complete(
-            request.session.pop['fido_state'],
+            request.session.pop('fido_state'),
             client_data,
             att_obj
         )

setup.py

@@ -4,7 +4,7 @@ from setuptools import find_packages, setup
 
 setup(
     name='django-mfa2',
-    version='2.5.1',
+    version='2.5.2',
     description='Allows user to add 2FA to their accounts',
     long_description=open("README.md").read(),
     long_description_content_type="text/markdown",