fabric8-analytics-server

fabric8-analytics-server copied to clipboard

Detail of CVE: ``` CVE-2018-1000656 More information moderate severity Vulnerable versions: < 0.12.3 Patched version: 0.12.3 The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability...

tisnik

Detail of CVE: ``` CVE-2018-18074 Vulnerable versions:

tisnik

Details of CVEs: ``` CVE-2019-10906 More information high severity Vulnerable versions: < 2.10.1 Patched version: 2.10.1 In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape. CVE-2016-10745 More information high...

tisnik

Details of CVE: ``` CVE-2019-11324 More information high severity Vulnerable versions: < 1.24.2 Patched version: 1.24.2 The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set...

tisnik

https://github.com/fabric8-analytics/fabric8-analytics-server/blob/407f09cc41f36dfc41ee45da4ec0817a8ceeea17/bayesian/auth.py#L8

tisnik

https://github.com/fabric8-analytics/fabric8-analytics-server/blob/407f09cc41f36dfc41ee45da4ec0817a8ceeea17/bayesian/exceptions.py#L8

tisnik

https://github.com/fabric8-analytics/fabric8-analytics-server/blob/37b533626ab6972b109c45f1b0b24ff1d48b0f2f/bayesian/api_v1.py#L858

tisnik

https://github.com/fabric8-analytics/fabric8-analytics-server/blob/37b533626ab6972b109c45f1b0b24ff1d48b0f2f/bayesian/api_v1.py#L904

tisnik

https://github.com/fabric8-analytics/fabric8-analytics-server/blob/37b533626ab6972b109c45f1b0b24ff1d48b0f2f/bayesian/api_v1.py#L1012

tisnik

https://github.com/fabric8-analytics/fabric8-analytics-server/blob/37b533626ab6972b109c45f1b0b24ff1d48b0f2f/bayesian/api_v1.py#L433

tisnik