Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump vulners from 2.1.5 to 2.1.7 #10220

Merged
merged 1 commit into from
May 17, 2024

Bump vulners from 2.1.5 to 2.1.7

1a5e863
Select commit
Loading
Failed to load commit list.
Merged

Bump vulners from 2.1.5 to 2.1.7 #10220

Bump vulners from 2.1.5 to 2.1.7
1a5e863
Select commit
Loading
Failed to load commit list.
DryRunSecurity / Sensitive Files Analyzer succeeded May 17, 2024 in 3s

DryRun Security

Details

Sensitive Files Analyzer Findings: 1 detected

⚠️ Potential Sensitive File requirements.txt (click for details)
Type Potential Sensitive File
Description It is typical for Django applications to utilize requirements.txt files to manage their dependencies. A change in this file may indicate an addition of a library/dependency which could introduce additional risk to the application either through vulnerable code, expansion of the application's attack surface via additional routes, or malicious code.
Filename requirements.txt
CodeLink
pycurl==7.45.3 # Required for Celery Broker AWS (SQS) support
boto3==1.34.107 # Required for Celery Broker AWS (SQS) support
netaddr==1.2.1
vulners==2.1.7
fontawesomefree==6.5.1