Safety CI > crim-ca/weaver

allow-empty-wps-processes

4 years, 10 months ago

e64a9359

reduce complexity of wps-process/provider registration

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

pyup-scheduled-update-2021-09-03

4 years, 10 months ago

13c6b498

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

allow-empty-wps-processes

4 years, 10 months ago

a137b234

full validation of process/provider registration from wps_processes.yml config file

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

allow-empty-wps-processes

4 years, 10 months ago

98c88eec

add unit tests for validation of common use cases of wps_processes.yml parsing and expected results

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

dependabot/pip/pywps-4.5.0

4 years, 10 months ago

16129a1e

Bump pywps from 4.4.3 to 4.5.0 Bumps [pywps](https://github.com/geopython/pywps) from 4.4.3 to 4.5.

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-02

4 years, 10 months ago

51c416d2

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

master

4 years, 10 months ago

f1aa752e

Merge pull request #308 from crim-ca/fix-import

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

pywps-4.5

4 years, 10 months ago

8fdf215e

patch pywps-4.5 missing language from request raising XML-template generation

No dependencies with known security vulnerabilities.

fix-import

4 years, 10 months ago

c14b8891

Merge branch 'master' into fix-import

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

fix-import

4 years, 10 months ago

2cddfa44

fix circular import between swagger_definitions and wps_restapi.utils introduced in https://github.c

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

pywps-4.5

4 years, 10 months ago

a9640f20

Merge branch 'master' into pywps-4.5

No dependencies with known security vulnerabilities.

pywps-4.5

4 years, 10 months ago

c33a8191

patch pywps-4.5 missing language from request raising XML-template generation

No dependencies with known security vulnerabilities.

master

4 years, 10 months ago

a80f343c

Merge pull request #288 from crim-ca/block-unknown-processes Block unknown process type deployment

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

block-unknown-processes

4 years, 10 months ago

a586cb79

fix duplicate get_application_requirement/_get_requirement definitions

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

master

4 years, 10 months ago

0e0449a6

Merge pull request #261 from crim-ca/process-desc-format OGC-API v1.0-draft6 conformance

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.