Skip to content

[Snyk] Fix for 23 vulnerabilities #83

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Fix for 23 vulnerabilities #83

wants to merge 1 commit into from

Conversation

adamlaska
Copy link
Owner

snyk-top-banner

Snyk has created this PR to fix 23 vulnerabilities in the pip dependencies of this project.

Snyk changed the following file(s):

  • requirements.txt
⚠️ Warning 
scout-apm 2.26.1 has requirement urllib3[secure]<2; python_version >= "3.5", but you have urllib3 2.0.7.
celery 5.3.0 requires kombu, which is not installed.

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)
🦉 Directory Traversal
🦉 SQL Injection
🦉 More lessons are available in Snyk Learn

@snyk-bot
fix: requirements.txt to reduce vulnerabilities
f5eaa05 
The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7435780
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7436273
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7436514
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7436646
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7642790
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7642791
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7642813
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7642814
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7886958
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7886959
- https://snyk.io/vuln/SNYK-PYTHON-JWCRYPTO-6405821
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219984
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219986
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6514866
- https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482
- https://snyk.io/vuln/SNYK-PYTHON-SQLPARSE-6615674
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250
- https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-8309636
- https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
@google-cla Google CLA
Copy link

google-cla bot commented Nov 8, 2024

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@socket-security Socket Security
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/[email protected] None 0 5.93 kB sindresorhus
npm/[email protected] None 0 4.41 kB hughsk
npm/[email protected] None 0 3.54 kB sindresorhus
npm/[email protected] None 0 13.3 kB rvagg
npm/[email protected] None 0 29.3 kB oss-bot
npm/[email protected] filesystem 0 37.5 kB coreyfarrell
npm/[email protected] None 0 291 kB oss-bot
npm/[email protected] None 0 1.3 MB sschadwick
npm/[email protected] None 0 1.32 MB timmywil
npm/[email protected] None 0 27.4 kB carhartl
npm/[email protected] None 0 438 kB yaozilong
npm/[email protected] None 0 45.8 kB andyperlitch
npm/[email protected] None 0 10.4 kB isaacs
npm/[email protected] None 0 26.1 kB kriszyp
npm/[email protected] None 0 12.7 kB isaacs
npm/[email protected] None 0 229 kB jordanbtucker
npm/[email protected] filesystem 0 19.8 kB ryanzim
npm/[email protected] None 0 31.4 kB bahamat
npm/[email protected] None 0 19.4 kB bahmutov
npm/[email protected] None 0 5.39 kB eventualbuddha
npm/[email protected] None 0 943 kB javve
npm/[email protected] environment 0 168 kB cenk1cenk2
npm/[email protected] environment, filesystem, unsafe 0 2.32 MB kriszyp
npm/[email protected] None 0 10.2 kB jdalton
npm/[email protected] None 0 4.58 kB sindresorhus
npm/[email protected] None 0 7.58 kB sindresorhus
npm/[email protected] None 0 68.7 kB isaacs
npm/[email protected] None 0 3.9 MB icambron
npm/[email protected] None 0 373 kB antfu
npm/[email protected] environment, network 0 59 kB nlf
npm/[email protected] None 0 4.31 kB stevemao
npm/[email protected] None 0 206 kB dougwilson
npm/[email protected] None 0 18.3 kB dougwilson
npm/[email protected] environment, filesystem 0 51.7 kB broofa
npm/[email protected] None 0 4.46 kB sindresorhus
npm/[email protected] None 0 4.87 kB isaacs
npm/[email protected] environment, network 0 46.2 kB nlf
npm/[email protected] None 0 3.77 kB isaacs
npm/[email protected] None 0 7 kB isaacs
npm/[email protected] None 0 124 kB isaacs
npm/[email protected] None 0 3.67 MB ichernev
npm/[email protected] None 0 4.23 MB ichernev
npm/[email protected] None 0 14.6 kB kriszyp
npm/[email protected] environment, eval, unsafe 0 306 kB kriszyp
npm/[email protected] None 0 6.34 kB mikolalysenko
npm/[email protected] environment 0 23.8 MB 07akioni
npm/[email protected] None 0 21.6 kB ai
npm/[email protected] None 0 27.4 kB dougwilson
npm/[email protected] None 0 384 kB nicknaso
npm/[email protected] environment, filesystem, unsafe 0 13.3 kB kriszyp
npm/[email protected] environment, filesystem 0 12.8 kB mafintosh
npm/[email protected] environment, shell 0 1.98 MB rvagg
npm/[email protected] environment 0 8.13 kB sindresorhus
npm/[email protected] None 0 17.1 kB lukekarrys
npm/[email protected] None 0 2.84 kB zertosh
npm/[email protected] unsafe 0 13.7 kB dougwilson
npm/[email protected] None 0 6.17 kB sindresorhus
npm/[email protected] None 0 48.5 kB kriszyp
npm/[email protected] environment 0 3.38 kB jprichardson
npm/[email protected] None 0 8.69 kB sindresorhus
npm/[email protected] None 0 5.41 kB sindresorhus
npm/[email protected] None 0 108 kB blakeembrey
npm/[email protected] None 0 6.01 kB superjoe
npm/[email protected] None 0 11.3 kB meryn
npm/[email protected] environment 0 5.66 kB alexeyraspopov
npm/[email protected] None 0 6.02 kB sindresorhus
npm/[email protected] None 0 5.98 kB seb.l.
npm/[email protected] environment 0 382 kB posva
npm/[email protected] environment, filesystem 0 186 kB ai
npm/[email protected] None 0 908 kB jdecroock
npm/[email protected] None 0 11.5 kB sindresorhus
npm/[email protected] None 0 3.04 kB iarna
npm/[email protected] None 0 15.6 kB achingbrain
npm/[email protected] environment 0 24.2 kB rob-w
npm/[email protected] None 0 433 kB lupomontero
npm/[email protected] filesystem 0 7.78 kB mafintosh
npm/[email protected] None 0 126 kB ljharb
npm/[email protected] None 0 17.6 kB jessetane
npm/[email protected] None 0 8.46 kB dougwilson
npm/[email protected] filesystem 0 20.5 kB paulmillr
npm/[email protected] None 0 23 kB satazor
npm/[email protected] filesystem 0 12.1 kB troygoode
npm/[email protected] None 0 2.82 kB sindresorhus
npm/[email protected] None 0 32.2 kB tim-kos
npm/[email protected] None 0 24 kB davidmarkclements
npm/[email protected] None 0 298 kB mourner
npm/[email protected] filesystem 0 24.2 kB mbostock
npm/[email protected] None 0 4.48 MB blesh
npm/[email protected] None 0 42.3 kB chalker
npm/[email protected] None 0 4.49 MB sassbot
npm/[email protected] None 0 70.7 kB 07akioni
npm/[email protected] None 0 169 kB apalfrey
npm/[email protected] None 0 846 kB kevin-brown
npm/[email protected] None 0 61.6 kB isaacs
npm/[email protected] filesystem, network 0 50.1 kB dougwilson
npm/[email protected] None 0 4.03 kB wesleytodd
npm/[email protected] None 0 6.2 kB sindresorhus
npm/[email protected] None 0 138 kB joshglazebrook
npm/[email protected] network 0 27.4 kB kikobeats
npm/[email protected] network 0 152 kB joshglazebrook
npm/[email protected] None 0 551 kB owenm
npm/[email protected] None 0 148 kB 7rulnik
npm/[email protected] None 0 31.8 kB rich_harris
npm/[email protected] None 0 231 kB bahamat
npm/[email protected] None 0 37.5 kB nlf
npm/[email protected] None 0 12.1 kB dougwilson
npm/[email protected] None 0 9.31 kB nwoltman
npm/[email protected] None 0 3.05 kB sindresorhus
npm/[email protected] None 0 23.6 kB coreyfarrell
npm/[email protected] None 0 4.49 kB dominicbarnes
npm/[email protected] None 0 12.5 kB dominictarr
npm/[email protected] filesystem 0 52.9 kB raszi
npm/[email protected] None 0 4.68 kB dougwilson
npm/[email protected] network 0 86.6 kB jstash
npm/[email protected] environment 0 93.1 kB 07akioni
npm/[email protected] None 0 50 kB typescript-bot
npm/[email protected] environment, network 0 16.7 kB mikeal
npm/[email protected] None 0 119 kB sindresorhus
npm/[email protected] None 0 41.4 kB iarna
npm/[email protected] None 0 2.68 kB zkat
npm/[email protected] None 0 4.64 kB ryanzim
npm/[email protected] None 0 3.01 kB sindresorhus
npm/[email protected] None 0 62.2 kB piotrwitek
npm/[email protected] filesystem, unsafe 0 44.6 kB oss-bot
npm/[email protected] None 0 18.4 kB 07akioni
npm/[email protected] None 0 35.8 kB dap
npm/[email protected] environment 0 52.8 kB 07akioni
npm/[email protected] filesystem 0 20.5 kB antfu
npm/[email protected] environment 0 795 kB posva
npm/[email protected] environment, eval 0 2.58 MB yyx990803
npm/[email protected] None 0 225 kB 07akioni
npm/[email protected] None 0 28.2 kB kriszyp
npm/[email protected] None 0 10.6 kB sindresorhus
npm/[email protected] environment, network 0 135 kB lpinca
npm/[email protected] None 0 40.6 kB jungomi
npm/[email protected] filesystem 0 23.4 kB oss-bot
npm/[email protected] environment 0 649 kB eemeli
npm/[email protected] environment, filesystem +1 411 kB oss-bot
npm/[email protected] filesystem 0 66.2 kB thejoshwolfe
npm/[email protected] None 0 3.46 MB wheels

🚮 Removed packages: npm/@html-validate/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@parcel/[email protected], npm/@sidvind/[email protected], npm/@swc/[email protected], npm/@trysound/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
do-not-merge
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@adamlaska @snyk-bot