Safety CI > h0rn3t/fastapi-async-sqlalchemy

0.7.1post1

2 months, 4 weeks ago

42613e93

add tests for edge cases and import fallbacks to improve code coverage

No dependencies with known security vulnerabilities.

0.7.1post1

2 months, 4 weeks ago

4e993744

enhance multi-session support with new state management and type hints, drop python 3.7,3.8, fixes a

No dependencies with known security vulnerabilities.

fixes-0.7.1post1

2 months, 4 weeks ago

f6d9905d

add tests for multi-session memory leaks and correctness

No dependencies with known security vulnerabilities.

main

3 months ago

c36ca2ce

Merge pull request #32 from yaroslav-dev-tech/multisession-issue https://github.com/h0rn3t/fastapi-

No dependencies with known security vulnerabilities.

main

3 months, 2 weeks ago

d090ad95

Merge pull request #30 from h0rn3t/multi_sessions_wip-3 bump version to 0.7.1 and enhance multi-ses

No dependencies with known security vulnerabilities.

multi_sessions_wip-3

3 months, 2 weeks ago

a67f25aa

update sqlparse version to >=0.5.4 has known security vulnerabilities

No dependencies with known security vulnerabilities.

multi_sessions_wip-3

3 months, 2 weeks ago

a2089264

refactor tests to remove unused imports and streamline warning handling

sqlparse 0.5.1 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.5.1	<0.5.4	show Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.
sqlparse	0.5.1	<0.5.4	show Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts. Note: This issue is due to an incomplete fix for CVE-2024-4340.

Package

Installed

Affected

Info

sqlparse

0.5.1

<0.5.4

show

Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.

sqlparse

0.5.1

<0.5.4

show

Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts.

**Note:** This issue is due to an incomplete fix for CVE-2024-4340.

multi_sessions_wip-3

3 months, 2 weeks ago

4e69258d

refactor tests to remove unused imports and streamline warning handling

sqlparse 0.5.1 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.5.1	<0.5.4	show Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.
sqlparse	0.5.1	<0.5.4	show Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts. Note: This issue is due to an incomplete fix for CVE-2024-4340.

Package

Installed

Affected

Info

sqlparse

0.5.1

<0.5.4

show

Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.

sqlparse

0.5.1

<0.5.4

show

Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts.

**Note:** This issue is due to an incomplete fix for CVE-2024-4340.

multi_sessions_wip-3

3 months, 2 weeks ago

20986378

add comprehensive tests for custom engine and multi-session behavior

sqlparse 0.5.1 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.5.1	<0.5.4	show Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.
sqlparse	0.5.1	<0.5.4	show Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts. Note: This issue is due to an incomplete fix for CVE-2024-4340.

Package

Installed

Affected

Info

sqlparse

0.5.1

<0.5.4

show

Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.

sqlparse

0.5.1

<0.5.4

show

Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts.

**Note:** This issue is due to an incomplete fix for CVE-2024-4340.

multi_sessions_wip-3

4 months ago

22a1d088

bump version to 0.7.1 and enhance multi-session cleanup with tracking

No dependencies with known security vulnerabilities.

multi_sessions_wip-3

4 months ago

1a74fdf9

bump version to 0.7.1 and enhance multi-session cleanup with tracking

No dependencies with known security vulnerabilities.

claude/fix-session-leaks-fas-011CV3fP7V9TDwFtBW2aukr5

4 months ago

a7e74977

docs: add multi-sessions usage examples and documentation Add comprehensive documentation and pract

No dependencies with known security vulnerabilities.

claude/fix-session-leaks-fas-011CV3fP7V9TDwFtBW2aukr5

4 months, 1 week ago

69350f87

fix: prevent session leaks in multi-session mode This commit fixes critical session leaks in multi-

No dependencies with known security vulnerabilities.

claude/expose-dbsessionmeta-type-011CUpiWZixm4YXPGmAvcWFG

4 months, 2 weeks ago

596e82ae

Expose DBSessionMeta type for convenient type hinting Fixes #18 Previously in version 0.6, DBSessi

No dependencies with known security vulnerabilities.

main

6 months, 3 weeks ago

1e6077e9

Merge pull request #29 from h0rn3t/fix/ruff fix ruff

No dependencies with known security vulnerabilities.