Safety CI > crim-ca/weaver

fix-validate-exec-inputs-optional

4 years, 10 months ago

fded7402

Merge branch 'master' into fix-validate-exec-inputs-optional

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

master

4 years, 10 months ago

96d2bcad

Merge pull request #326 from crim-ca/fix-wps-literal

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

fix-wps-literal

4 years, 10 months ago

46bc187e

fix lint

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

fix-wps-literal

4 years, 10 months ago

aec3f43e

fix lint

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

fix-validate-exec-inputs-optional

4 years, 10 months ago

8a68b111

fix Execute inputs incorrectly formatted not validated/raised as invalid due to optional inputs perm

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

fix-wps-literal

4 years, 10 months ago

712d5e51

resolve edge-cases of query parameter deserialize from int-like str

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

fix-wps-literal

4 years, 10 months ago

0fe30b45

fix default literal value resolution in process description following PyWPS+CWL merge strategy

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

pyup-scheduled-update-2021-09-14

4 years, 10 months ago

cb691751

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

fix-wps-literal

4 years, 10 months ago

574a57c3

fix some test cases of minOccurs=0 auto-fixed with defaultValue present (relates to https://github.c

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

fix-wps-literal

4 years, 10 months ago

3309d639

even more explicit literal data type validation and tests

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

pyup-scheduled-update-2021-09-13

4 years, 10 months ago

1c33eed3

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-12

4 years, 10 months ago

7cc1d976

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-11

4 years, 10 months ago

3aafa688

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

fix-wps-literal

4 years, 10 months ago

87e1f5ad

Merge branch 'master' into fix-wps-literal

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

fix-wps-literal

4 years, 10 months ago

95564353

add more test to ensure unique default format in complex data and applied extra fields

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.