Safety CI > crim-ca/weaver

fix-wps-literal

4 years, 7 months ago

eed5f219

update changelog with parsing and return description of literalDataDomains (fixes #41, fixes #211, f

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

master

4 years, 7 months ago

8f6fa97d

Merge pull request #321 from crim-ca/conform-refs

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

conform-refs

4 years, 7 months ago

bfebba96

update all available/applicable req/rec/per conformance links

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

pyup-scheduled-update-2021-09-07

4 years, 7 months ago

3af49991

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-06

4 years, 7 months ago

e9abda20

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-05

4 years, 7 months ago

72e99950

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-04

4 years, 7 months ago

3d0ad054

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

master

4 years, 7 months ago

69e2dd3d

Merge pull request #312 from crim-ca/allow-empty-wps-processes

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

allow-empty-wps-processes

4 years, 7 months ago

665fbeb2

fix import lint

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

allow-empty-wps-processes

4 years, 7 months ago

e64a9359

reduce complexity of wps-process/provider registration

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

pyup-scheduled-update-2021-09-03

4 years, 7 months ago

13c6b498

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

allow-empty-wps-processes

4 years, 7 months ago

a137b234

full validation of process/provider registration from wps_processes.yml config file

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

allow-empty-wps-processes

4 years, 7 months ago

98c88eec

add unit tests for validation of common use cases of wps_processes.yml parsing and expected results

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

dependabot/pip/pywps-4.5.0

4 years, 7 months ago

16129a1e

Bump pywps from 4.4.3 to 4.5.0 Bumps [pywps](https://github.com/geopython/pywps) from 4.4.3 to 4.5.

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-02

4 years, 7 months ago

51c416d2

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.