Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Updated various dependencies to reduce vulnerabilities #2958

Open
wants to merge 29 commits into
base: master
Choose a base branch
from
Open

Updated various dependencies to reduce vulnerabilities #2958

wants to merge 29 commits into from

Commits on Apr 1, 2024

  1. fix: requirements.txt to reduce vulnerabilities 

    The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6514866
    @snyk-bot
    snyk-bot committed Apr 1, 2024
    Configuration menu
    Copy the full SHA
    b4d9767 View commit details
    Browse the repository at this point in the history

Commits on Apr 18, 2024

  1. fix: requirements-dev.txt to reduce vulnerabilities 

    The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6645291
    @snyk-bot
    snyk-bot committed Apr 18, 2024
    Configuration menu
    Copy the full SHA
    9413bf6 View commit details
    Browse the repository at this point in the history

Commits on Apr 19, 2024

  1. fix: requirements.txt to reduce vulnerabilities 

    The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6645291
    @snyk-bot
    snyk-bot committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    67a4fdc View commit details
    Browse the repository at this point in the history

Commits on Apr 22, 2024

  1. Merge pull request #6 from beac0n5/snyk-fix-ce69b0ce6e2bba2278083d04b… 

    …4c010bb

[Snyk] Security upgrade aiohttp from 3.8.6 to 3.9.4
    @b34c0n5
    b34c0n5 committed Apr 22, 2024
    Configuration menu
    Copy the full SHA
    99d9c34 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #5 from beac0n5/snyk-fix-56c5a6fd9a3ca9ce64a8e8214… 

    …0023634

[Snyk] Security upgrade aiohttp from 3.8.6 to 3.9.4
    @b34c0n5
    b34c0n5 committed Apr 22, 2024
    Configuration menu
    Copy the full SHA
    7ae98fc View commit details
    Browse the repository at this point in the history

Commits on Apr 24, 2024

  1. Merge branch 'mitre:master' into master

    @b34c0n5
    b34c0n5 committed Apr 24, 2024
    Configuration menu
    Copy the full SHA
    82a367a View commit details
    Browse the repository at this point in the history

Commits on Apr 26, 2024

  1. Merge branch 'mitre:master' into master

    @b34c0n5
    b34c0n5 committed Apr 26, 2024
    Configuration menu
    Copy the full SHA
    8b048f2 View commit details
    Browse the repository at this point in the history

Commits on Apr 29, 2024

  1. Merge branch 'mitre:master' into master

    @b34c0n5
    b34c0n5 committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    02870a0 View commit details
    Browse the repository at this point in the history

Commits on May 4, 2024

  1. fix: Dockerfile to reduce vulnerabilities 

    The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-UBUNTU2304-GLIBC-5919743
- https://snyk.io/vuln/SNYK-UBUNTU2304-GLIBC-5919743
- https://snyk.io/vuln/SNYK-UBUNTU2304-GNUTLS28-6172202
- https://snyk.io/vuln/SNYK-UBUNTU2304-GNUTLS28-6172713
- https://snyk.io/vuln/SNYK-UBUNTU2304-PAM-6170209
    @snyk-bot
    snyk-bot committed May 4, 2024
    Configuration menu
    Copy the full SHA
    b99acd6 View commit details
    Browse the repository at this point in the history

Commits on May 5, 2024

  1. fix: requirements.txt to reduce vulnerabilities 

    The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6808823
- https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6592767
    @snyk-bot
    snyk-bot committed May 5, 2024
    Configuration menu
    Copy the full SHA
    ed89788 View commit details
    Browse the repository at this point in the history

Commits on May 8, 2024

  1. fix: requirements.txt to reduce vulnerabilities 

    The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6809379
    @snyk-bot
    snyk-bot committed May 8, 2024
    Configuration menu
    Copy the full SHA
    66f2ec0 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #11 from beac0n5/snyk-fix-07f0789b7e273bbfc02a60dc… 

    …539a872e

[Snyk] Security upgrade jinja2 from 3.1.3 to 3.1.4
    @b34c0n5
    b34c0n5 committed May 8, 2024
    Configuration menu
    Copy the full SHA
    9c54864 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #9 from beac0n5/snyk-fix-092fcda0e84a7aee1b3ea1c68… 

    …a850d28

[Snyk] Security upgrade ubuntu from 23.04 to mantic-20240427
    @b34c0n5
    b34c0n5 committed May 8, 2024
    Configuration menu
    Copy the full SHA
    5ebad26 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #10 from beac0n5/snyk-fix-a54a627fdd5ae48cc37590bd… 

    …9bec012d

[Snyk] Fix for 2 vulnerabilities
    @b34c0n5
    b34c0n5 committed May 8, 2024
    Configuration menu
    Copy the full SHA
    2c7aa66 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #3 from beac0n5/snyk-fix-9185a7a0799aa31f32e46b617… 

    …45e5dd9

[Snyk] Security upgrade pillow from 9.5.0 to 10.3.0
    @b34c0n5
    b34c0n5 committed May 8, 2024
    Configuration menu
    Copy the full SHA
    6a893db View commit details
    Browse the repository at this point in the history

  6. Merge branch 'mitre:master' into master

    @b34c0n5
    b34c0n5 committed May 8, 2024
    Configuration menu
    Copy the full SHA
    e1ee8c2 View commit details
    Browse the repository at this point in the history

Commits on May 9, 2024

  1. Merge branch 'master' into master

    @b34c0n5
    b34c0n5 committed May 9, 2024
    Configuration menu
    Copy the full SHA
    53def20 View commit details
    Browse the repository at this point in the history

Commits on May 10, 2024

  1. Update requirements.txt manually 

    downgraded jinja to 3.1.2 to avoid a vulnerability of 3.1.3 as upgrading to 3.1.4 breaks the CI/CD tests
    @b34c0n5
    b34c0n5 committed May 10, 2024
    Configuration menu
    Copy the full SHA
    7fd96b5 View commit details
    Browse the repository at this point in the history

  2. fix: requirements.txt to reduce vulnerabilities 

    The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6150717
- https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6809379
    @snyk-bot
    snyk-bot committed May 10, 2024
    Configuration menu
    Copy the full SHA
    61f5971 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #12 from beac0n5/snyk-fix-ed8ee952b1347aa2277b07f0… 

    …d1b6df39

[Snyk] Security upgrade jinja2 from 3.1.2 to 3.1.4
    @b34c0n5
    b34c0n5 committed May 10, 2024
    Configuration menu
    Copy the full SHA
    54bad4b View commit details
    Browse the repository at this point in the history

  4. Revert "[Snyk] Security upgrade aiohttp from 3.8.6 to 3.9.4"

    @b34c0n5
    b34c0n5 committed May 10, 2024
    Configuration menu
    Copy the full SHA
    23050d1 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #14 from beac0n5/revert-6-snyk-fix-ce69b0ce6e2bba2… 

    …278083d04b4c010bb

Revert "[Snyk] Security upgrade aiohttp from 3.8.6 to 3.9.4"
    @b34c0n5
    b34c0n5 committed May 10, 2024
    Configuration menu
    Copy the full SHA
    1e90995 View commit details
    Browse the repository at this point in the history

  6. Update requirements.txt 

    rev jinja 3.1.4 to 3.1.2
    @b34c0n5
    b34c0n5 committed May 10, 2024
    Configuration menu
    Copy the full SHA
    56787d9 View commit details
    Browse the repository at this point in the history

  7. fix: requirements.txt to reduce vulnerabilities 

    The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6150717
- https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6809379
    @snyk-bot
    snyk-bot committed May 10, 2024
    Configuration menu
    Copy the full SHA
    59d77f7 View commit details
    Browse the repository at this point in the history

Commits on May 13, 2024

  1. fix: requirements-dev.txt to reduce vulnerabilities 

    The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412
    @snyk-bot
    snyk-bot committed May 13, 2024
    Configuration menu
    Copy the full SHA
    d504915 View commit details
    Browse the repository at this point in the history

Commits on May 15, 2024

  1. Merge pull request #17 from b34c0n5/snyk-fix-9d92cd03ac2ab9fd5be9c99d… 

    …790ee5ae

[Snyk] Security upgrade setuptools from 40.5.0 to 65.5.1
    @b34c0n5
    b34c0n5 committed May 15, 2024
    Configuration menu
    Copy the full SHA
    a570f59 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #16 from b34c0n5/snyk-fix-ed657a633e31cfdce9c81151… 

    …6d0d098e

[Snyk] Security upgrade jinja2 from 3.1.2 to 3.1.4
    @b34c0n5
    b34c0n5 committed May 15, 2024
    Configuration menu
    Copy the full SHA
    03f1b05 View commit details
    Browse the repository at this point in the history

  3. Update requirements.txt

    @b34c0n5
    b34c0n5 committed May 15, 2024
    Configuration menu
    Copy the full SHA
    80075eb View commit details
    Browse the repository at this point in the history

Commits on May 24, 2024

  1. Merge branch 'mitre:master' into master

    @b34c0n5
    b34c0n5 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    7e275cb View commit details
    Browse the repository at this point in the history