Skip to content

vulnerabilities in outdated dependencies #463

@ubiquitin

Description

@ubiquitin

Issues to fix by upgrading dependencies:

Upgrade flask@0.10.1 to flask@0.12.3 to fix

  • Improper Input Validation
  • Denial of Service (DOS)

Upgrade pyyaml@3.11 to pyyaml@4.1 to fix

  • Arbitrary Code Execution [High Severity] - bug in pyyaml@3.11

Upgrade requests@2.3.0 to requests@2.6.0 to fix

  • Session Fixation [Medium Severity]
  • HTTP Request Redirection [Medium Severity]
  • Information Exposure [High Severity]

Pin Jinja2@2.7.3 to Jinja2@2.10.1 to fix

  • Sandbox Escape [Medium Severity] introduced by flask@0.10.1 > Jinja2@2.7.3
  • Sandbox Bypass [High Severity]

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions