school_management_system icon indicating copy to clipboard operation
school_management_system copied to clipboard

Published 20 hours ago • verified publisher icon sajib1066

[Snyk] Security upgrade python from 3.11.0a6 to 3.11.0b5

Open sajib1066 opened this issue 1 year ago • 1 comments

This PR was automatically created by Snyk using the credentials of a real user.


Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Changes included in this PR

  • Dockerfile

We recommend upgrading to python:3.11.0b5, as this image has only 282 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Some of the most important vulnerabilities in your base image include:

Severity Priority Score / 1000 Issue Exploit Maturity
critical severity 714 Directory Traversal
SNYK-DEBIAN11-DPKG-2847942		 No Known Exploit
medium severity 514 Integer Overflow or Wraparound
SNYK-DEBIAN11-LIBXML2-2806812		 No Known Exploit
critical severity 714 OS Command Injection
SNYK-DEBIAN11-OPENSSL-2807596		 No Known Exploit
critical severity 714 OS Command Injection
SNYK-DEBIAN11-OPENSSL-2933518		 No Known Exploit
high severity 614 Use After Free
SNYK-DEBIAN11-SUBVERSION-2635643		 No Known Exploit

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

sajib1066 avatar Jul 27 '22 19:07 sajib1066

okay

On Wed, Jul 27, 2022 at 8:25 PM Sajib Hossain @.***> wrote:

This PR was automatically created by Snyk using the credentials of a real user.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image. Changes included in this PR

  • Dockerfile

We recommend upgrading to python:3.11.0b5, as this image has only 282 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Some of the most important vulnerabilities in your base image include: Severity Priority Score / 1000 Issue Exploit Maturity [image: critical severity] https://camo.githubusercontent.com/e8801c915c6aef37567a907c70a535ca95335c2d490a3340d06bba439a1ed005/68747470733a2f2f7265732e636c6f7564696e6172792e636f6d2f736e796b2f696d6167652f75706c6f61642f775f32302c685f32302f76313536313937373831392f69636f6e2f632e706e67 714 Directory Traversal SNYK-DEBIAN11-DPKG-2847942 https://snyk.io/vuln/SNYK-DEBIAN11-DPKG-2847942 No Known Exploit [image: medium severity] https://camo.githubusercontent.com/87ff89b4b8f94ce578fb7cf68651203196e42036bb7052c0e196850e22f8d2c9/68747470733a2f2f7265732e636c6f7564696e6172792e636f6d2f736e796b2f696d6167652f75706c6f61642f775f32302c685f32302f76313536313937373831392f69636f6e2f6d2e706e67 514 Integer Overflow or Wraparound SNYK-DEBIAN11-LIBXML2-2806812 https://snyk.io/vuln/SNYK-DEBIAN11-LIBXML2-2806812 No Known Exploit [image: critical severity] https://camo.githubusercontent.com/e8801c915c6aef37567a907c70a535ca95335c2d490a3340d06bba439a1ed005/68747470733a2f2f7265732e636c6f7564696e6172792e636f6d2f736e796b2f696d6167652f75706c6f61642f775f32302c685f32302f76313536313937373831392f69636f6e2f632e706e67 714 OS Command Injection SNYK-DEBIAN11-OPENSSL-2807596 https://snyk.io/vuln/SNYK-DEBIAN11-OPENSSL-2807596 No Known Exploit [image: critical severity] https://camo.githubusercontent.com/e8801c915c6aef37567a907c70a535ca95335c2d490a3340d06bba439a1ed005/68747470733a2f2f7265732e636c6f7564696e6172792e636f6d2f736e796b2f696d6167652f75706c6f61642f775f32302c685f32302f76313536313937373831392f69636f6e2f632e706e67 714 OS Command Injection SNYK-DEBIAN11-OPENSSL-2933518 https://snyk.io/vuln/SNYK-DEBIAN11-OPENSSL-2933518 No Known Exploit [image: high severity] https://camo.githubusercontent.com/9d51f28c19d68a26a2a08210e149d8afec20f84af0925bd9aedbd406c56cad72/68747470733a2f2f7265732e636c6f7564696e6172792e636f6d2f736e796b2f696d6167652f75706c6f61642f775f32302c685f32302f76313536313937373831392f69636f6e2f682e706e67 614 Use After Free SNYK-DEBIAN11-SUBVERSION-2635643 https://snyk.io/vuln/SNYK-DEBIAN11-SUBVERSION-2635643 No Known Exploit

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: https://camo.githubusercontent.com/ed08e77e6e476ba2b8ef748d31967f7338a6822f781dbb89fe116fc8ee6840f6/68747470733a2f2f6170692e7365676d656e742e696f2f76312f706978656c2f747261636b3f646174613d65794a33636d6c305a55746c65534936496e4a79576d785a634564485932527954485a7362306c596430645563566734576b4652546e4e434f5545774969776959573576626e6c746233567a535751694f6949315a446c694e7a68694d69316a597a6c694c545177597a41744f5456694e6930314e7a51784e6a55305a546b774d3255694c434a6c646d567564434936496c425349485a705a58646c5a434973496e42796233426c636e52705a584d694f6e736963484a4a5a434936496a566b4f5749334f4749794c574e6a4f5749744e44426a4d4330354e5749324c5455334e4445324e54526c4f54417a5a534a3966513d3d 🧐 View latest project report https://app.snyk.io/org/sajib1066/project/bc057248-90b0-4d0a-b989-6a41a083bd8a?utm_source=github&utm_medium=referral&page=fix-pr

🛠 Adjust project settings https://app.snyk.io/org/sajib1066/project/bc057248-90b0-4d0a-b989-6a41a083bd8a?utm_source=github&utm_medium=referral&page=fix-pr/settings

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn. https://learn.snyk.io?loc=fix-pr

You can view, comment on, or merge this pull request online at:

https://github.com/sajib1066/school_management_system/pull/31 Commit Summary

File Changes

(1 file https://github.com/sajib1066/school_management_system/pull/31/files)

Patch Links:

  • https://github.com/sajib1066/school_management_system/pull/31.patch
  • https://github.com/sajib1066/school_management_system/pull/31.diff

— Reply to this email directly, view it on GitHub https://github.com/sajib1066/school_management_system/pull/31, or unsubscribe https://github.com/notifications/unsubscribe-auth/AVBFTJ7X5XSJQ2K6FKBS22TVWGEKPANCNFSM542XVRSQ . You are receiving this because you are subscribed to this thread.Message ID: @.***>

simokamaa avatar Aug 07 '22 05:08 simokamaa