bk-bcs-saas

bk-bcs-saas copied to clipboard

通过蓝鲸PaaS部署需要防止其他应用也使用`backend`造成冲突

jamesgetx

能否提供一个docker版本来快速体验？部署文档有点复杂，还要集成社区版。

4

是BUG反馈还是需求提交(Is this a BUG REPORT or FEATURE REQUEST)? (choose one): BK-BCS-SaaS 版本(The versions used): 发生了什么(What happened): 期望是什么(What you expected to happen): 如何复现(How to reproduce it): 相关的日志详情和截图等(Log & Screenshot): 备注(Anything else...

chimisu

jamesgetx

https://github.com/Tencent/bk-bcs-saas/blob/5c6b09ce71e36051910a92db6df7b435e9d67cdd/bcs-app/requirements.txt#L1 CVE-2019-19844 CVE-2020-7471 CVE-2020-9402 Recommended upgrade version：1.11.29

QiAnXinCodeSafe

https://github.com/Tencent/bk-bcs-saas/blob/5c6b09ce71e36051910a92db6df7b435e9d67cdd/bcs-app/requirements.txt#L34 CVE-2020-5311 CVE-2020-5312 CVE-2020-5310 CVE-2019-16865 Recommended upgrade version：5.4.0.dev0

QiAnXinCodeSafe

变更点(Changes) 更新docker repo api

dellkeji

build(deps): bump oauthlib from 3.1.1 to 3.2.1 in /bcs-app

1

Bumps [oauthlib](https://github.com/oauthlib/oauthlib) from 3.1.1 to 3.2.1. Release notes Sourced from oauthlib's releases. 3.2.1 In short OAuth2.0 Provider: #803 : Metadata endpoint support of non-HTTPS CVE-2022-36087 OAuth1.0: #818 : Allow IPv6...

dependabot[bot]

Bumps [django](https://github.com/django/django) from 3.2.2 to 3.2.18. Commits 722e9f8 [3.2.x] Bumped version for 3.2.18 release. a665ed5 [3.2.x] Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files. 932b5bd [3.2.x] Added stub...

dependabot[bot]

build(deps): bump cryptography from 3.4.7 to 39.0.1 in /bcs-app

1

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.4.7 to 39.0.1. Changelog Sourced from cryptography's changelog. 39.0.1 - 2023-02-07 * **SECURITY ISSUE** - Fixed a bug where ``Cipher.update_into`` accepted Python buffer protocol objects, but allowed...

dependabot[bot]

build(deps): bump oauthlib from 3.1.1 to 3.2.2 in /bcs-app

1

Bumps [oauthlib](https://github.com/oauthlib/oauthlib) from 3.1.1 to 3.2.2. Release notes Sourced from oauthlib's releases. 3.2.2 OAuth2.0 Provider: CVE-2022-36087 3.2.1 In short OAuth2.0 Provider: #803 : Metadata endpoint support of non-HTTPS OAuth1.0: #818...

dependabot[bot]