HumanCellAtlas / ingest-central

Ingest Central is the hub repository for the ingest service
Apache License 2.0
0 stars 1 forks source link

Remediate High Urllib3 vulnerability #653

Open Lilalamar opened 4 years ago

Lilalamar commented 4 years ago

Snyk reports the following High severity vulnerability in HumanCellAtlas/ingest-api-tests. Please remediate by the end of Q1 Milestone 1.

Description

urllib3

Suggested Remediation

Upgrade urllib3 to version 1.24.3 or higher.

Details

urllib3 is an HTTP library with thread-safe connection pooling, file post, and more. Affected versions of this package are vulnerable to CRLF injection. Attacker who has the control of the requesting address parameter, could manipulate an HTTP header and attack an internal service.