Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix 18 vulnerable dependencies identified by Prisma Cloud #11

Closed
wants to merge 1 commit into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 9 additions & 9 deletions src/emailservice/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ backoff==2.2.1
# via opentelemetry-exporter-otlp-proto-grpc
cachetools==5.2.0
# via google-auth
certifi==2022.12.7
certifi == 2023.07.22
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

# via requests
charset-normalizer==2.1.1
# via requests
Expand Down Expand Up @@ -40,24 +40,24 @@ googleapis-common-protos==1.57.0
# google-api-core
# grpcio-status
# opentelemetry-exporter-otlp-proto-grpc
grpcio==1.51.1
grpcio == 1.53.0
# via
# -r requirements.in
# google-api-core
# grpcio-health-checking
# grpcio-status
# opentelemetry-exporter-otlp-proto-grpc
grpcio-health-checking==1.51.1
grpcio == 1.53.0
# via -r requirements.in
grpcio-status==1.51.1
grpcio == 1.53.0
# via google-api-core
httplib2==0.21.0
# via
# google-api-python-client
# google-auth-httplib2
idna==3.4
# via requests
jinja2==3.1.2
jinja2 == 3.1.3
# via -r requirements.in
markupsafe==2.1.1
# via jinja2
Expand All @@ -72,11 +72,11 @@ opentelemetry-distro==0.36b0
# via -r requirements.in
opentelemetry-exporter-otlp-proto-grpc==1.15.0
# via -r requirements.in
opentelemetry-instrumentation==0.36b0
opentelemetry-instrumentation == 0.41b0
# via
# opentelemetry-distro
# opentelemetry-instrumentation-grpc
opentelemetry-instrumentation-grpc==0.36b0
opentelemetry-instrumentation == 0.41b0
# via -r requirements.in
opentelemetry-proto==1.15.0
# via opentelemetry-exporter-otlp-proto-grpc
Expand Down Expand Up @@ -112,7 +112,7 @@ pyparsing==3.0.9
# via httplib2
python-json-logger==2.0.4
# via -r requirements.in
requests==2.28.1
requests == 2.31.0
# via
# -r requirements.in
# google-api-core
Expand All @@ -127,7 +127,7 @@ typing-extensions==4.4.0
# via opentelemetry-sdk
uritemplate==4.1.1
# via google-api-python-client
urllib3==1.26.13
urllib3 == 2.0.7
# via requests
wrapt==1.14.1
# via
Expand Down
20 changes: 10 additions & 10 deletions src/loadgenerator/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@
#
brotli==1.0.9
# via geventhttpclient
certifi==2022.12.7
certifi == 2023.07.22
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

# via
# geventhttpclient
# requests
Expand All @@ -16,20 +16,20 @@ click==8.1.3
# via flask
configargparse==1.5.3
# via locust
flask==2.2.2
flask == 2.3.2
# via
# flask-basicauth
# flask-cors
# locust
flask-basicauth==0.2.0
flask == 2.3.2
# via locust
flask-cors==3.0.10
flask == 2.3.2
# via locust
gevent==22.10.2
gevent == 23.9.0
# via
# geventhttpclient
# locust
geventhttpclient==2.0.8
gevent == 23.9.0
# via locust
greenlet==2.0.1
# via gevent
Expand All @@ -39,7 +39,7 @@ importlib-metadata==5.2.0
# via flask
itsdangerous==2.1.2
# via flask
jinja2==3.1.2
jinja2 == 3.1.3
# via flask
locust==2.14.0
# via -r requirements.in
Expand All @@ -53,7 +53,7 @@ psutil==5.9.4
# via locust
pyzmq==24.0.1
# via locust
requests==2.28.1
requests == 2.31.0
# via locust
roundrobin==0.0.4
# via locust
Expand All @@ -63,9 +63,9 @@ six==1.16.0
# geventhttpclient
typing-extensions==4.4.0
# via locust
urllib3==1.26.13
urllib3 == 2.0.7
# via requests
werkzeug==2.2.2
werkzeug == 3.0.1
# via
# flask
# locust
Expand Down
14 changes: 7 additions & 7 deletions src/recommendationservice/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ backoff==2.2.1
# via opentelemetry-exporter-otlp-proto-grpc
cachetools==5.2.0
# via google-auth
certifi==2022.12.7
certifi == 2023.07.22
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

certifi 2023.0 / requirements.txt

Total vulnerabilities: 1

Critical: 1 High: 0 Medium: 0 Low: 0
Vulnerability IDSeverityCVSSFixed inStatus
CVE-2023-37920 CRITICAL CRITICAL 9.8 2023.07.22 Open

# via requests
charset-normalizer==2.1.1
# via requests
Expand Down Expand Up @@ -36,12 +36,12 @@ googleapis-common-protos==1.57.0
# via
# google-api-core
# opentelemetry-exporter-otlp-proto-grpc
grpcio==1.51.1
grpcio == 1.53.0
# via
# -r requirements.in
# grpcio-health-checking
# opentelemetry-exporter-otlp-proto-grpc
grpcio-health-checking==1.51.1
grpcio == 1.53.0
# via -r requirements.in
httplib2==0.21.0
# via
Expand All @@ -60,11 +60,11 @@ opentelemetry-distro==0.36b0
# via -r requirements.in
opentelemetry-exporter-otlp-proto-grpc==1.15.0
# via -r requirements.in
opentelemetry-instrumentation==0.36b0
opentelemetry-instrumentation == 0.41b0
# via
# opentelemetry-distro
# opentelemetry-instrumentation-grpc
opentelemetry-instrumentation-grpc==0.36b0
opentelemetry-instrumentation == 0.41b0
# via -r requirements.in
opentelemetry-proto==1.15.0
# via opentelemetry-exporter-otlp-proto-grpc
Expand Down Expand Up @@ -95,7 +95,7 @@ pyparsing==3.0.9
# via httplib2
python-json-logger==2.0.4
# via -r requirements.in
requests==2.28.1
requests == 2.31.0
# via
# -r requirements.in
# google-api-core
Expand All @@ -112,7 +112,7 @@ typing-extensions==4.4.0
# via opentelemetry-sdk
uritemplate==4.1.1
# via google-api-python-client
urllib3==1.26.13
urllib3 == 2.0.7
# via requests
wrapt==1.14.1
# via
Expand Down