Safety CI > crim-ca/weaver

process-desc-format

4 years, 10 months ago

19fe4d38

fix format in changes

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

process-desc-format

4 years, 10 months ago

46f77bb4

add methods to provide schema reference of expected request body / provided response schema (relates

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

pyup-scheduled-update-2021-08-27

4 years, 10 months ago

e6a030c8

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

process-desc-format

4 years, 10 months ago

2d6f390b

fix process version retrieval from remote WPS (requires https://github.com/geopython/OWSLib/pull/794

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

pyup-scheduled-update-2021-08-26

4 years, 10 months ago

7533a78c

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

process-desc-format

4 years, 10 months ago

0c81de89

fix support empty WPS process inputs for OGC-API mapping representation

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

process-desc-format

4 years, 10 months ago

a5d6296b

fix WPS-DescribeProcess URL reported under provider-converted processEndpointWPS1 field & links

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

process-desc-format

4 years, 10 months ago

2b50a77d

move service url check handling under method and fix failing HEAD request for WPS GetCapabilities

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

pyup-scheduled-update-2021-08-25

4 years, 10 months ago

94bb83f7

Update pywps from 4.4.3 to 4.5.0

No dependencies with known security vulnerabilities.

process-desc-format

4 years, 10 months ago

17ac3c77

add providers listing of names & allowed disable check/fetch by query parameters

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

process-desc-format

4 years, 10 months ago

b380c93c

fix input minOccurs/maxOccurs resolution when process comes from remote provider (relates to #263)

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

block-unknown-processes

4 years, 10 months ago

3a92ce12

revert pywps update

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

block-unknown-processes

4 years, 10 months ago

4fd5af69

update pywps from 4.4.3 to 4.5.0 to patch vulnerabilties

No dependencies with known security vulnerabilities.

block-unknown-processes

4 years, 10 months ago

c077260b

Block unknown process type deployment(fixes #276)

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

block-unknown-processes

4 years, 10 months ago

eaf28855

Block unknown process type deployment(fixes #211)

pywps 4.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pywps	4.4.3	<4.4.5	show An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Package

Installed

Affected

Info

pywps

4.4.3

<4.4.5

show

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.