patchwork
patchwork copied to clipboard
PatchWork AutoFix
This pull request from patched fixes 3 issues.
- File changed: patchwork/app.py
Fix vulnerability in find_patchflow function
Avoid loading modules using importlib.import_module() with untrusted input. Removed usage of importlib.import_module() and ensured only safe modules are loaded using spec_from_file_location().
- File changed: patchwork/common/utils/step_typing.py
Fixed vulnerability by avoiding dynamic values in importlib.import_module()
Avoided dynamic values in importlib.import_module() by using a whitelist approach to prevent loading arbitrary code.
- File changed: patchwork/common/utils/dependency.py
Fix vulnerability in importlib.import_module()
Avoid using dynamic values in importlib.import_module() by checking the name against a whitelist before importing the module.