Database wrong entry of CVE-2020-7694 and CVE-2020-7695

pyupio / safety

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

https://safetycli.com/product/safety-cli

MIT License

1.7k stars 143 forks source link

Database wrong entry of CVE-2020-7694 and CVE-2020-7695 #310

Closed wojtek-fliposports closed 4 years ago

wojtek-fliposports commented 4 years ago

safety version: 1.9.0
Python version: 3.7.3
Operating System: OSX 10.15.6

Description

safety has wrong database error about uvicorn and CVE-2020-7694, CVE-2020-7695.

| uvicorn                    | 0.11.8    | >=0                      | 38624    |
| uvicorn                    | 0.11.8    | >=0                      | 38625    |

That vulnerability has been resolved 0.11.7

What I Did

pipenv install --python 3.7.3 safety uvicorn
safety check

harlekeyn commented 4 years ago

Duplicate of 2314.