Safety CI > h0rn3t/fastapi-async-sqlalchemy

0.7.1.post3

10 months ago

21a94328

bump version to 0.7.1.post3 and enhance backward compatibility for asyncio.gather() without multi_se

No dependencies with known security vulnerabilities.

main

10 months ago

ab138fb5

Merge pull request #35 from h0rn3t/0.7.1post2 0.7.1post2

No dependencies with known security vulnerabilities.

0.7.1post2

10 months ago

374edbac

add test for SQLModel import fallback to ensure middleware functionality without SQLModel

No dependencies with known security vulnerabilities.

main

10 months ago

d51b01f8

Merge pull request #34 from h0rn3t/0.7.1post1 enhance multi-session support with new state manageme

No dependencies with known security vulnerabilities.

0.7.1post1

10 months ago

aab8355e

pre-commit fix

No dependencies with known security vulnerabilities.

0.7.1post1

10 months ago

42613e93

add tests for edge cases and import fallbacks to improve code coverage

No dependencies with known security vulnerabilities.

0.7.1post1

10 months ago

4e993744

enhance multi-session support with new state management and type hints, drop python 3.7,3.8, fixes a

No dependencies with known security vulnerabilities.

fixes-0.7.1post1

10 months ago

f6d9905d

add tests for multi-session memory leaks and correctness

No dependencies with known security vulnerabilities.

main

10 months ago

c36ca2ce

Merge pull request #32 from yaroslav-dev-tech/multisession-issue https://github.com/h0rn3t/fastapi-

No dependencies with known security vulnerabilities.

main

10 months, 2 weeks ago

d090ad95

Merge pull request #30 from h0rn3t/multi_sessions_wip-3 bump version to 0.7.1 and enhance multi-ses

No dependencies with known security vulnerabilities.

multi_sessions_wip-3

10 months, 2 weeks ago

a67f25aa

update sqlparse version to >=0.5.4 has known security vulnerabilities

No dependencies with known security vulnerabilities.

multi_sessions_wip-3

10 months, 2 weeks ago

a2089264

refactor tests to remove unused imports and streamline warning handling

sqlparse 0.5.1 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.5.1	<0.5.4	show Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts. Note: This issue is due to an incomplete fix for CVE-2024-4340.
sqlparse	0.5.1	<0.5.4	show Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.

Package

Installed

Affected

Info

sqlparse

0.5.1

<0.5.4

show

Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts.

**Note:** This issue is due to an incomplete fix for CVE-2024-4340.

sqlparse

0.5.1

<0.5.4

show

Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.

multi_sessions_wip-3

10 months, 2 weeks ago

4e69258d

refactor tests to remove unused imports and streamline warning handling

sqlparse 0.5.1 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.5.1	<0.5.4	show Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts. Note: This issue is due to an incomplete fix for CVE-2024-4340.
sqlparse	0.5.1	<0.5.4	show Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.

Package

Installed

Affected

Info

sqlparse

0.5.1

<0.5.4

show

Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts.

**Note:** This issue is due to an incomplete fix for CVE-2024-4340.

sqlparse

0.5.1

<0.5.4

show

Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.

multi_sessions_wip-3

10 months, 2 weeks ago

20986378

add comprehensive tests for custom engine and multi-session behavior

sqlparse 0.5.1 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.5.1	<0.5.4	show Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts. Note: This issue is due to an incomplete fix for CVE-2024-4340.
sqlparse	0.5.1	<0.5.4	show Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.

Package

Installed

Affected

Info

sqlparse

0.5.1

<0.5.4

show

Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts.

**Note:** This issue is due to an incomplete fix for CVE-2024-4340.

sqlparse

0.5.1

<0.5.4

show

Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.

multi_sessions_wip-3

11 months, 1 week ago

22a1d088

bump version to 0.7.1 and enhance multi-session cleanup with tracking

No dependencies with known security vulnerabilities.