Update requirements.txt #22
Conversation
![stacklok-cloud[bot]](https://avatars.githubusercontent.com/in/863270?s=60&v=4){kind=small}
| @@ -1 +1,2 @@ | |||
| Flask | |||
| werkzeug==3.0.5 | |||
There was a problem hiding this comment.
| werkzeug==3.0.5 | |
| werkzeug==3.0.6 |
Minder Vulnerability Report
|
| Package | Version | #Vulnerabilities | #Fixes | Patch |
|---|---|---|---|---|
| werkzeug | 3.0.5 | 2 | 2 | 3.0.6 |
Summary of vulnerabilities found
Minder found the following vulnerabilities in this PR:| Ecosystem | Name | Version | Vulnerability ID | Summary | Introduced | Fixed |
|---|---|---|---|---|---|---|
| PyPI | werkzeug | 3.0.5 | GHSA-f9vj-2wh5-fj8j | Werkzeug safe_join not safe on Windows | 0 | 3.0.6 |
| PyPI | werkzeug | 3.0.5 | GHSA-q34m-jh98-gwm2 | Werkzeug possible resource exhaustion when parsing file data in forms | 0 | 0.19.7 |
Dependency InformationMinder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile. 📦 Dependency: werkzeugTrusty Score: 0Scoring details
Proof of Origin (Provenance)This package can be linked back to its source code using a historical provenance map. We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
|
4 similar comments
Dependency InformationMinder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile. 📦 Dependency: werkzeugTrusty Score: 0Scoring details
Proof of Origin (Provenance)This package can be linked back to its source code using a historical provenance map. We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
|
Dependency InformationMinder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile. 📦 Dependency: werkzeugTrusty Score: 0Scoring details
Proof of Origin (Provenance)This package can be linked back to its source code using a historical provenance map. We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
|
Dependency InformationMinder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile. 📦 Dependency: werkzeugTrusty Score: 0Scoring details
Proof of Origin (Provenance)This package can be linked back to its source code using a historical provenance map. We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
|
Dependency InformationMinder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile. 📦 Dependency: werkzeugTrusty Score: 0Scoring details
Proof of Origin (Provenance)This package can be linked back to its source code using a historical provenance map. We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
|
Dependency InformationMinder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile. 📦 Dependency: werkzeugTrusty Score: 0Scoring details
Proof of Origin (Provenance)This package can be linked back to its source code using a historical provenance map. We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
|
Dependency InformationMinder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile. 📦 Dependency: werkzeugTrusty Score: 0Scoring details
Proof of Origin (Provenance)This package can be linked back to its source code using a historical provenance map. We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
|
3 similar comments
Dependency InformationMinder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile. 📦 Dependency: werkzeugTrusty Score: 0Scoring details
Proof of Origin (Provenance)This package can be linked back to its source code using a historical provenance map. We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
|
Dependency InformationMinder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile. 📦 Dependency: werkzeugTrusty Score: 0Scoring details
Proof of Origin (Provenance)This package can be linked back to its source code using a historical provenance map. We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
|
Dependency InformationMinder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile. 📦 Dependency: werkzeugTrusty Score: 0Scoring details
Proof of Origin (Provenance)This package can be linked back to its source code using a historical provenance map. We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
|
No description provided.