ThreatPlaybook icon indicating copy to clipboard operation
ThreatPlaybook copied to clipboard

A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestration

Results 42 ThreatPlaybook issues
Sort by recently updated
recently updated
newest added

Bumps [mistune](https://github.com/lepture/mistune) from 0.8.4 to 2.0.3. Release notes Sourced from mistune's releases. Version 2.0.2 Fix escape_url via lepture/mistune#295 Version 2.0.1 Fix XSS for image link syntax. Version 2.0.0 First release...

dependencies
python

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project. #### Changes included in this PR - Changes to the following...

Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 1.7.1 to 2.4.0. Release notes Sourced from pyjwt's releases. 2.4.0 Security [CVE-2022-29217] Prevent key confusion through non-blocklisted public key formats. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24 What's Changed Add support for Python...

dependencies
python

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project. #### Changes included in this PR - Changes to the following...

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project. #### Changes included in this PR - Changes to the following...

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image. #### Changes included in this PR - nginx/Dockerfile We recommend...

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project. #### Changes included in this PR - Changes to the following...

Bumps [flask-cors](https://github.com/corydolphin/flask-cors) from 3.0.8 to 3.0.9. Release notes Sourced from flask-cors's releases. Release 3.0.9 Security Escape path before evaluating resource rules (thanks @​praetorian-colby-morgan). Prior to this, flask-cors incorrectly evaluated CORS...

dependencies
python

Bumps [py](https://github.com/pytest-dev/py) from 1.8.1 to 1.10.0. Changelog Sourced from py's changelog. 1.10.0 (2020-12-12) Fix a regular expression DoS vulnerability in the py.path.svnwc SVN blame functionality (CVE-2020-29651) Update vendored apipkg: 1.4...

dependencies
python

Bumps [pyyaml](https://github.com/yaml/pyyaml) from 5.3.1 to 5.4. Changelog Sourced from pyyaml's changelog. 5.4 (2021-01-19) yaml/pyyaml#407 -- Build modernization, remove distutils, fix metadata, build wheels, CI to GHA yaml/pyyaml#472 -- Fix for...

dependencies
python