Skip to content

Commit

Permalink
Fix CVE
Browse files Browse the repository at this point in the history
  -> Vulnerability found in lxml version 4.6.5
     Vulnerability ID: 50748
     Affected spec: <4.9.1
     ADVISORY: Lxml 4.9.1 include a fix for CVE-2022-2309: NULL Pointer
     Dereference allows attackers to cause a denial of service (or application...
     CVE-2022-2309
     For more information, please visit
     https://pyup.io/vulnerabilities/CVE-2022-2309/50748/

  -> Vulnerability found in mako version 1.1.3
     Vulnerability ID: 50870
     Affected spec: <1.2.2
     ADVISORY: Mako 1.2.2 includes a fix for a REDoS
     vulnerability.sqlalchemy/mako#366
     PVE-2022-50870
     For more information, please visit
     https://pyup.io/vulnerabilities/PVE-2022-50870/50870/
  • Loading branch information
sbrunner committed Sep 30, 2022
1 parent 4dd355e commit 008725e
Show file tree
Hide file tree
Showing 4 changed files with 166 additions and 146 deletions.
4 changes: 2 additions & 2 deletions acceptance_tests/Pipfile
Expand Up @@ -23,8 +23,8 @@ hupper = "==1.10.2"
idna = "==2.10"
importlib-metadata = "==3.3.0"
iniconfig = "==1.1.1"
lxml = "==4.6.5"
mako = "==1.1.3"
lxml = "==4.9.1"
mako = "==1.2.2"
markupsafe = "==1.1.1"
netifaces = "==0.10.9"
objgraph = "==3.5.0"
Expand Down
144 changes: 77 additions & 67 deletions acceptance_tests/Pipfile.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 2 additions & 2 deletions api/Pipfile
Expand Up @@ -20,8 +20,8 @@ graphviz = "==0.16"
gunicorn = "==20.0.4"
hupper = "==1.10.2"
idna = "==2.10"
lxml = "==4.6.5"
mako = "==1.1.3"
lxml = "==4.9.1"
mako = "==1.2.2"
markupsafe = "==1.1.1"
netifaces = "==0.10.9"
objgraph = "==3.5.0"
Expand Down

0 comments on commit 008725e

Please sign in to comment.