Safety CI > crim-ca/weaver

process-desc-format

4 years, 8 months ago

0c81de89

fix support empty WPS process inputs for OGC-API mapping representation

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

process-desc-format

4 years, 8 months ago

a5d6296b

fix WPS-DescribeProcess URL reported under provider-converted processEndpointWPS1 field & links

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

process-desc-format

4 years, 8 months ago

2b50a77d

move service url check handling under method and fix failing HEAD request for WPS GetCapabilities

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

pyup-scheduled-update-2021-08-25

4 years, 8 months ago

94bb83f7

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

process-desc-format

4 years, 8 months ago

17ac3c77

add providers listing of names & allowed disable check/fetch by query parameters

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

process-desc-format

4 years, 8 months ago

b380c93c

fix input minOccurs/maxOccurs resolution when process comes from remote provider (relates to #263)

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

block-unknown-processes

4 years, 8 months ago

3a92ce12

revert pywps update

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

block-unknown-processes

4 years, 8 months ago

4fd5af69

update pywps from 4.4.3 to 4.5.0 to patch vulnerabilties

No dependencies with known security vulnerabilities.

block-unknown-processes

4 years, 8 months ago

c077260b

Block unknown process type deployment(fixes #276)

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

block-unknown-processes

4 years, 8 months ago

eaf28855

Block unknown process type deployment(fixes #211)

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

master

4 years, 8 months ago

4a748399

Merge pull request #287 from crim-ca/test-only

No dependencies with known security vulnerabilities.

test-only

4 years, 8 months ago

1589fe1b

patch typing noqa

No dependencies with known security vulnerabilities.

test-only

4 years, 8 months ago

75a98c43

patch detected 'security' issue with proper tempfile creation in test

No dependencies with known security vulnerabilities.

test-only

4 years, 8 months ago

1bc92be2

adjust test matrix variants to use or not -only as applicable + skip setup for docker test

No dependencies with known security vulnerabilities.

test-only

4 years, 8 months ago

561185ab

run '<test-case>-only' variants to avoid useless re-check/install of pre-installed depedencies

No dependencies with known security vulnerabilities.