SharonKoch / skf-labs

Repo for all the OWASP-SKF Docker lab examples
Apache License 2.0
0 stars 1 forks source link

Update dependency Flask to v1 - autoclosed #112

Closed mend-for-github-com[bot] closed 4 months ago

mend-for-github-com[bot] commented 4 months ago

This PR contains the following updates:

Package Update Change
Flask (changelog) major ==0.10.1 -> ==1.0

By merging this PR, the issue #56 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 7.5 CVE-2018-1000656
High High 7.5 CVE-2019-1010083

Release Notes

pallets/flask (Flask) ### [`v1.0`](https://togithub.com/pallets/flask/blob/HEAD/CHANGES.rst#Version-310) [Compare Source](https://togithub.com/pallets/flask/compare/0.12.5...1.0) - Provide a configuration option to control automatic option responses. :pr:`5496` ### [`v0.12.5`](https://togithub.com/pallets/flask/blob/HEAD/CHANGES.rst#Version-0125) [Compare Source](https://togithub.com/pallets/flask/compare/0.12.4...0.12.5) Released 2020-02-10 - Pin Werkzeug to < 1.0.0. :issue:`3497` ### [`v0.12.4`](https://togithub.com/pallets/flask/blob/HEAD/CHANGES.rst#Version-0124) [Compare Source](https://togithub.com/pallets/flask/compare/0.12.3...0.12.4) Released 2018-04-29 - Repackage 0.12.3 to fix package layout issue. :issue:`2728` ### [`v0.12.3`](https://togithub.com/pallets/flask/blob/HEAD/CHANGES.rst#Version-0123) [Compare Source](https://togithub.com/pallets/flask/compare/0.12.2...0.12.3) Released 2018-04-26 - `Request.get_json` no longer accepts arbitrary encodings. Incoming JSON should be encoded using UTF-8 per :rfc:`8259`, but Flask will autodetect UTF-8, -16, or -32. :issue:`2692` - Fix a Python warning about imports when using `python -m flask`. :issue:`2666` - Fix a `ValueError` caused by invalid `Range` requests in some cases. ### [`v0.12.2`](https://togithub.com/pallets/flask/blob/HEAD/CHANGES.rst#Version-0122) [Compare Source](https://togithub.com/pallets/flask/compare/0.12.1...0.12.2) Released 2017-05-16 - Fix a bug in `safe_join` on Windows. ### [`v0.12.1`](https://togithub.com/pallets/flask/blob/HEAD/CHANGES.rst#Version-0121) [Compare Source](https://togithub.com/pallets/flask/compare/0.12...0.12.1) Released 2017-03-31 - Prevent `flask run` from showing a `NoAppException` when an `ImportError` occurs within the imported application module. - Fix encoding behavior of `app.config.from_pyfile` for Python 3. :issue:`2118` - Use the `SERVER_NAME` config if it is present as default values for `app.run`. :issue:`2109`, :pr:`2152` - Call `ctx.auto_pop` with the exception object instead of `None`, in the event that a `BaseException` such as `KeyboardInterrupt` is raised in a request handler. ### [`v0.12`](https://togithub.com/pallets/flask/blob/HEAD/CHANGES.rst#Version-0125) [Compare Source](https://togithub.com/pallets/flask/compare/0.11.1...0.12) Released 2020-02-10 - Pin Werkzeug to < 1.0.0. :issue:`3497` ### [`v0.11.1`](https://togithub.com/pallets/flask/blob/HEAD/CHANGES.rst#Version-0111) [Compare Source](https://togithub.com/pallets/flask/compare/0.11...0.11.1) Released 2016-06-07 - Fixed a bug that prevented `FLASK_APP=foobar/__init__.py` from working. :pr:`1872` ### [`v0.11`](https://togithub.com/pallets/flask/blob/HEAD/CHANGES.rst#Version-0111) [Compare Source](https://togithub.com/pallets/flask/compare/0.10.1...0.11) Released 2016-06-07 - Fixed a bug that prevented `FLASK_APP=foobar/__init__.py` from working. :pr:`1872`