Safety CI > Bellboy-Capstone/Services

Docs | Support

Bellboy-Capstone/Services

Requirements Safety CI

master

5 years ago

3b3568ee

Add pyup badges.

No dependencies with known security vulnerabilities.

master

5 years ago

17a29ea6

Merge branch 'master' of github.com:Bellboy-Capstone/Services into master

No dependencies with known security vulnerabilities.

master

5 years ago

781cf1a8

create pyup.io config file (#5)

djangorestframework 3.11.1 has known security vulnerabilities.

Package	Installed	Affected	Info
djangorestframework	3.11.1	<3.15.2	show Affected versions of the package djangorestframework are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.
djangorestframework	3.11.1	<3.11.2	show A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.

Package

Installed

Affected

Info

djangorestframework

3.11.1

<3.15.2

show

Affected versions of the package djangorestframework are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

djangorestframework

3.11.1

<3.11.2

show

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.