Safety CI > alphagov/notifications-api

volume-stat-report

4 years, 5 months ago

a09ae528

Move the casting the column as an int to the the endpoint, we need to convert the Decimal data type

No dependencies with known security vulnerabilities.

volume-stat-report

4 years, 5 months ago

a012fac5

Move the casting the column as an int to the the endpoint, we need to convert the Decimal data type

No dependencies with known security vulnerabilities.

fix-docker-host-181498273

4 years, 5 months ago

3fab7a0c

Fix letter functional tests to work in Docker Currently "test_send_letter_notification_via_api" fai

No dependencies with known security vulnerabilities.

master

4 years, 5 months ago

50930645

Merge pull request #3481 from alphagov/service-callback-timeout Reduce timeout for service callback

No dependencies with known security vulnerabilities.

master

4 years, 5 months ago

8a8db654

Merge pull request #3480 from alphagov/benthorner-patch-1 Fix incorrect code block formatting in RE

No dependencies with known security vulnerabilities.

service-callback-timeout

4 years, 5 months ago

0d952b4d

Reduce timeout for service callback attempt to 5 seconds It is currently 60 seconds but we have had

No dependencies with known security vulnerabilities.

benthorner-patch-1

4 years, 5 months ago

ae410751

Fix incorrect code block formatting in README

No dependencies with known security vulnerabilities.

auto-retry-stuck-av-letters

4 years, 5 months ago

00259893

automatically retry letters stuck in pending-virus-scan Since sept 2019 we've had to log on to prod

No dependencies with known security vulnerabilities.

auto-retry-stuck-av-letters

4 years, 5 months ago

bc40fa00

automatically retry letters stuck in pending-virus-scan Since sept 2019 we've had to log on to prod

No dependencies with known security vulnerabilities.

master

4 years, 5 months ago

eb383004

Merge pull request #3478 from alphagov/custom-base-url-register-email Allow admin app to specify do

No dependencies with known security vulnerabilities.

custom-base-url-register-email

4 years, 5 months ago

c2b6a9df

Allow admin app to specify domain for registration email This follows the pattern for invite emails

No dependencies with known security vulnerabilities.

volume-stat-report

4 years, 5 months ago

466b7fa3

Report for total notifications sent per day for each channel. Daily volumes report: total volumes a

No dependencies with known security vulnerabilities.

master

4 years, 5 months ago

520d6218

Merge pull request #3476 from alphagov/upgrade-some-dependencies Upgrade some dependencies

No dependencies with known security vulnerabilities.

volume-stat-report

4 years, 5 months ago

64880671

Report for total notifications sent per day for each channel. Daily volumes report: total volumes a

celery 5.2.0 and celery 5.2.0 have known security vulnerabilities.

Package	Installed	Affected	Info
celery	5.2.0	<5.2.2	show Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.
celery	5.2.0	<5.2.2	show Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

Package

Installed

Affected

Info

celery

5.2.0

<5.2.2

show

Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

celery

5.2.0

<5.2.2

show

Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

upgrade-some-dependencies

4 years, 5 months ago

faec6083

Update notifications-python-client from 6.0.2 to 6.3.0

No dependencies with known security vulnerabilities.