Skip to content
This repository was archived by the owner on Feb 5, 2025. It is now read-only.

Bump the pip group across 1 directory with 7 updates #1

Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump the pip group across 1 directory with 7 updates #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions scripts/requirements-simple.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
requests==2.20.0
requests==2.32.2
six==1.10.0
PyYAML==5.4
ujson==1.33
ujson==5.4.0
14 changes: 7 additions & 7 deletions scripts/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
boto3==1.4.0
botocore==1.4.53
Fiona==1.6.3.post1
Fiona==1.10.0
PyYAML==5.4
Rtree==0.8.2
Shapely==1.5.14
Expand All @@ -10,17 +10,17 @@ click-plugins==1.0.3
cligj==0.4.0
cssselect==0.9.1
distribute==0.7.3
future==0.15.2
future==0.18.3
futures==3.0.5
ftfy==4.2.0
gevent==1.1.2
gevent==23.9.0
Copy link

@jit-ci jit-ci bot Jan 16, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Security control: Software Component Analysis Python

Cve-2023-41419, GHSA-x7m3-jprg-wc5g

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.

Is fix available? Yes, this issue was fixed in version 23.9.0

Severity: HIGH

Jit Bot commands and options (e.g., ignore issue)

You can trigger Jit actions by commenting on this PR review:

  • #jit_ignore_fp Ignore and mark this specific single instance of finding as “False Positive”
  • #jit_ignore_accept Ignore and mark this specific single instance of finding as “Accept Risk”
  • #jit_ignore_type_in_file Ignore any finding of type "CVE-2023-41419, GHSA-x7m3-jprg-wc5g" in scripts/requirements.txt; future occurrences will also be ignored.
  • #jit_undo_ignore Undo ignore command

greenlet==0.4.10
jmespath==0.9.0
leveldb==0.193
lxml==4.6.3
lxml==4.9.1
lru-dict==1.1.3
marisa-trie==0.7.2
numpy==1.10.4
numpy==1.22.0
pycountry==1.20
git+https://github.com/kmike/pymorphy2
pymorphy2-dicts-ru==2.4.394633.4298366
Expand All @@ -29,9 +29,9 @@ pyproj==1.9.5.1
pystache==0.5.4
python-Levenshtein==0.12.0
python-geohash==0.8.5
requests==2.20.0
requests==2.32.2
s3transfer==0.1.3
six==1.10.0
ujson==1.35
ujson==5.4.0
urlnorm==1.1.3
wsgiref==0.1.2