search

fga-eps-mds / 2019.1-unbrake

A software to control the steps in configuration, calibration, simulation e viewing of results from braking simulator that is in UnB - FGA shed.
https://fga-eps-mds.github.io/2019.1-unbrake/
MIT License
5 stars 1 forks source link

[Snyk] Security upgrade django from 2.2.2 to 2.2.28 #351

Open snyk-bot opened 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

⚠️ Warning ``` pylint-django 2.0.6 has requirement pylint>=2.0, but you have pylint 1.9.5. graphql-relay 0.5.0 has requirement graphql-core<2,>=0.5.0, but you have graphql-core 2.3.2. graphene-django 2.15.0 has requirement graphene<3,>=2.1.7, but you have graphene 2.1.3. flake8 3.7.7 has requirement pycodestyle<2.6.0,>=2.5.0, but you have pycodestyle 2.8.0. astroid 1.6.6 requires lazy-object-proxy, which is not installed. ```

Vulnerabilities that will be fixed

By pinning:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity
low severity 369/1000
Why? Has a fix available, CVSS 3.1		 Directory Traversal
SNYK-PYTHON-DJANGO-1066259		 django:
2.2.2 -> 2.2.28
No No Known Exploit
medium severity 509/1000
Why? Has a fix available, CVSS 5.9		 Web Cache Poisoning
SNYK-PYTHON-DJANGO-1076802		 django:
2.2.2 -> 2.2.28
No No Known Exploit
low severity 399/1000
Why? Has a fix available, CVSS 3.7		 Directory Traversal
SNYK-PYTHON-DJANGO-1090612		 django:
2.2.2 -> 2.2.28
No No Known Exploit
low severity 379/1000
Why? Has a fix available, CVSS 3.3		 Directory Traversal
SNYK-PYTHON-DJANGO-1279042		 django:
2.2.2 -> 2.2.28
No No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 HTTP Header Injection
SNYK-PYTHON-DJANGO-1290072		 django:
2.2.2 -> 2.2.28
No No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Directory Traversal
SNYK-PYTHON-DJANGO-1298665		 django:
2.2.2 -> 2.2.28
No No Known Exploit
medium severity 429/1000
Why? Has a fix available, CVSS 4.3		 Improper Input Validation
SNYK-PYTHON-DJANGO-1298666		 django:
2.2.2 -> 2.2.28
No No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Access Restriction Bypass
SNYK-PYTHON-DJANGO-2312875		 django:
2.2.2 -> 2.2.28
No No Known Exploit
low severity 399/1000
Why? Has a fix available, CVSS 3.7		 Directory Traversal
SNYK-PYTHON-DJANGO-2329158		 django:
2.2.2 -> 2.2.28
No No Known Exploit
low severity 399/1000
Why? Has a fix available, CVSS 3.7		 Information Exposure
SNYK-PYTHON-DJANGO-2329159		 django:
2.2.2 -> 2.2.28
No No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Denial of Service (DoS)
SNYK-PYTHON-DJANGO-2329160		 django:
2.2.2 -> 2.2.28
No No Known Exploit
medium severity 424/1000
Why? Has a fix available, CVSS 4.2		 Cross-site Scripting (XSS)
SNYK-PYTHON-DJANGO-2389002		 django:
2.2.2 -> 2.2.28
No No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Denial of Service (DoS)
SNYK-PYTHON-DJANGO-2389021		 django:
2.2.2 -> 2.2.28
No No Known Exploit
high severity 624/1000
Why? Has a fix available, CVSS 8.2		 SQL Injection
SNYK-PYTHON-DJANGO-2606966		 django:
2.2.2 -> 2.2.28
No No Known Exploit
high severity 731/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.2		 SQL Injection
SNYK-PYTHON-DJANGO-2606969		 django:
2.2.2 -> 2.2.28
No Proof of Concept
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 Man-in-the-Middle (MitM)
SNYK-PYTHON-DJANGO-451300		 django:
2.2.2 -> 2.2.28
No No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Denial of Service (DoS)
SNYK-PYTHON-DJANGO-456540		 django:
2.2.2 -> 2.2.28
No No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Denial of Service (DoS)
SNYK-PYTHON-DJANGO-456541		 django:
2.2.2 -> 2.2.28
No No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Denial of Service (DoS)
SNYK-PYTHON-DJANGO-456542		 django:
2.2.2 -> 2.2.28
No No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 SQL Injection
SNYK-PYTHON-DJANGO-456566		 django:
2.2.2 -> 2.2.28
No No Known Exploit
medium severity 529/1000
Why? Has a fix available, CVSS 6.3		 Privilege Escalation
SNYK-PYTHON-DJANGO-536439		 django:
2.2.2 -> 2.2.28
No No Known Exploit
medium severity 616/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9		 Account Hijacking
SNYK-PYTHON-DJANGO-538244		 django:
2.2.2 -> 2.2.28
No Proof of Concept
high severity 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 SQL Injection
SNYK-PYTHON-DJANGO-543998		 django:
2.2.2 -> 2.2.28
No Proof of Concept
high severity 594/1000
Why? Has a fix available, CVSS 7.6		 SQL Injection
SNYK-PYTHON-DJANGO-559326		 django:
2.2.2 -> 2.2.28
No No Known Exploit
medium severity 616/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9		 Information Exposure
SNYK-PYTHON-DJANGO-571013		 django:
2.2.2 -> 2.2.28
No Proof of Concept
medium severity 539/1000
Why? Has a fix available, CVSS 6.5		 Cross-site Scripting (XSS)
SNYK-PYTHON-DJANGO-571014		 django:
2.2.2 -> 2.2.28
No No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 Insecure Permissions
SNYK-PYTHON-DJANGO-609368		 django:
2.2.2 -> 2.2.28
No No Known Exploit
high severity 634/1000
Why? Has a fix available, CVSS 8.4		 Insecure Permissions
SNYK-PYTHON-DJANGO-609369		 django:
2.2.2 -> 2.2.28
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the effected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Directory Traversal 🦉 Directory Traversal 🦉 Directory Traversal 🦉 More lessons are available in Snyk Learn

codeclimate[bot] commented 2 years ago

Code Climate has analyzed commit 8745c371 and detected 0 issues on this pull request.

View more on Code Climate.