Closed OhmSpectator closed 3 months ago
[!IMPORTANT]
Review skipped
Ignore keyword(s) in the title.
Ignored keywords (2)
* WIP * DO NOT MERGEPlease check the settings in the CodeRabbit UI or the
.coderabbit.yaml
file in this repository. To trigger a single review, invoke the@coderabbitai review
command.You can disable this status message by setting the
reviews.review_status
tofalse
in the CodeRabbit configuration file.
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?
๐ Hey there! Just noticed this PR has been quiet for a week. We miss your updates! If there is no activity in the next week, we will need to close it for housekeeping. ๐๐งน
๐ Hey there! Just noticed this PR has been quiet for a week. We miss your updates! If there is no activity in the next week, we will need to close it for housekeeping. ๐๐งน
๐ Hey there! Just noticed this PR has been quiet for a week. We miss your updates! If there is no activity in the next week, we will need to close it for housekeeping. ๐๐งน
๐ช We are doing a little housekeeping and noticed this PR has been quiet for a while. We are going to close it for now. If you are ready to pick this up again, please feel free to open a new PR or reach out to us, and we will be happy to help you reopen this one! ๐๐
This PR was automatically created by Snyk using the credentials of a real user.
![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123) ### Snyk has created this PR to fix 3 vulnerabilities in the dockerfile dependencies of this project. Keeping your Docker base image up-to-date means youโll benefit from security fixes in the latest version of your chosen image. #### Snyk changed the following file(s): - `backend/Dockerfile` We recommend upgrading to `node:22.2-bookworm-slim`, as this image has only **37** known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected. #### Vulnerabilities that will be fixed with an upgrade: | | Issue | Score | :-------------------------:|:-------------------------|:------------------------- ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png 'high severity') | Improper Input Validation
[SNYK-DEBIAN12-PYTHON311-3325304](https://snyk.io/vuln/SNYK-DEBIAN12-PYTHON311-3325304) | **614** ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png 'high severity') | Improper Input Validation
[SNYK-DEBIAN12-PYTHON311-3325304](https://snyk.io/vuln/SNYK-DEBIAN12-PYTHON311-3325304) | **614** ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png 'high severity') | Untrusted Search Path
[SNYK-DEBIAN12-PYTHON311-5853785](https://snyk.io/vuln/SNYK-DEBIAN12-PYTHON311-5853785) | **614** ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png 'high severity') | Untrusted Search Path
[SNYK-DEBIAN12-PYTHON311-5853785](https://snyk.io/vuln/SNYK-DEBIAN12-PYTHON311-5853785) | **614** ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png 'high severity') | Allocation of Resources Without Limits or Throttling
[SNYK-DEBIAN12-SYSTEMD-6277507](https://snyk.io/vuln/SNYK-DEBIAN12-SYSTEMD-6277507) | **614** --- > [!IMPORTANT] > > - Check the changes in this PR to ensure they won't cause issues with your project. > - Max score is 1000. Note that the real score may have changed since the PR was raised. > - This PR was automatically created by Snyk using the credentials of a real user. --- **Note:** _You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs._ For more information: ๐ง [View latest project report](https://app.snyk.io/org/ohmspectator/project/8cfcfe76-674a-45c2-835f-0c2c64a89cee?utm_source=github&utm_medium=referral&page=fix-pr) ๐ [Customise PR templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates) ๐ [Adjust project settings](https://app.snyk.io/org/ohmspectator/project/8cfcfe76-674a-45c2-835f-0c2c64a89cee?utm_source=github&utm_medium=referral&page=fix-pr/settings) ๐ [Read about Snyk's upgrade logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) --- **Learn how to fix vulnerabilities with free interactive lessons:** ๐ฆ [Improper Input Validation](https://learn.snyk.io/lesson/improper-input-validation/?loc=fix-pr) ๐ฆ [Allocation of Resources Without Limits or Throttling](https://learn.snyk.io/lesson/no-rate-limiting/?loc=fix-pr) [//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"node","from":"21","to":"22.2-bookworm-slim"}],"env":"prod","issuesToFix":[{"exploit_maturity":"No Known Exploit","id":"SNYK-DEBIAN12-PYTHON311-3325304","priority_score":614,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"severity","label":"high","score":400},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Input Validation"},{"exploit_maturity":"No Known Exploit","id":"SNYK-DEBIAN12-PYTHON311-5853785","priority_score":614,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"severity","label":"high","score":400},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Untrusted Search Path"},{"exploit_maturity":"No Known Exploit","id":"SNYK-DEBIAN12-PYTHON311-3325304","priority_score":614,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"severity","label":"high","score":400},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Input Validation"},{"exploit_maturity":"No Known Exploit","id":"SNYK-DEBIAN12-PYTHON311-5853785","priority_score":614,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"severity","label":"high","score":400},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Untrusted Search Path"},{"exploit_maturity":"No Known Exploit","id":"SNYK-DEBIAN12-SYSTEMD-6277507","priority_score":614,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"severity","label":"high","score":400},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Allocation of Resources Without Limits or Throttling"}],"prId":"89872aa8-7952-488a-b6b7-453592adce3d","prPublicId":"89872aa8-7952-488a-b6b7-453592adce3d","packageManager":"dockerfile","priorityScoreList":[614,614,614],"projectPublicId":"8cfcfe76-674a-45c2-835f-0c2c64a89cee","projectUrl":"https://app.snyk.io/org/ohmspectator/project/8cfcfe76-674a-45c2-835f-0c2c64a89cee?utm_source=github&utm_medium=referral&page=fix-pr","prType":"fix","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["updated-fix-title","priorityScore"],"type":"user-initiated","upgrade":["SNYK-DEBIAN12-PYTHON311-3325304","SNYK-DEBIAN12-PYTHON311-3325304","SNYK-DEBIAN12-PYTHON311-5853785","SNYK-DEBIAN12-PYTHON311-5853785","SNYK-DEBIAN12-SYSTEMD-6277507"],"vulns":["SNYK-DEBIAN12-PYTHON311-3325304","SNYK-DEBIAN12-PYTHON311-5853785","SNYK-DEBIAN12-SYSTEMD-6277507"],"patch":[],"isBreakingChange":false,"remediationStrategy":"vuln"}'