Media Services Application Mapper is a browser-based tool that allows operators to visualize the structure and logical connections among AWS Media Services and supporting services in the cloud. The tool can be used as a top-down resource monitoring tool when integrated with CloudWatch.
python-bandit medium ./msam/chalicelib/nodes.py lines 227 blacklist B303 Use of insecure MD2, MD4, MD5, or SHA1 hash function. Review the file and fix the issue.
python-bandit medium ./msam/chalicelib/periodic.py lines 299 blacklist B314 Using xml.etree.ElementTree.fromstring to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.etree.ElementTree.fromstring with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called Review the file and fix the issue.
python-bandit medium ./msam/chalicelib/periodic.py lines 310 blacklist B314 Using xml.etree.ElementTree.fromstring to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.etree.ElementTree.fromstring with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called Review the file and fix the issue.
python-bandit medium ./msam/chalicelib/nodes.py lines 227 blacklist B303 Use of insecure MD2, MD4, MD5, or SHA1 hash function. Review the file and fix the issue.
python-bandit medium ./msam/chalicelib/periodic.py lines 299 blacklist B314 Using xml.etree.ElementTree.fromstring to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.etree.ElementTree.fromstring with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called Review the file and fix the issue.
python-bandit medium ./msam/chalicelib/periodic.py lines 310 blacklist B314 Using xml.etree.ElementTree.fromstring to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.etree.ElementTree.fromstring with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called Review the file and fix the issue.