Skip to content

[Snyk] Fix for 21 vulnerabilities - #52

Open
somidax wants to merge 1 commit into
masterfrom
snyk-fix-aa136c61b5614c9f7a8f815886eab0f4
Open

[Snyk] Fix for 21 vulnerabilities#52
somidax wants to merge 1 commit into
masterfrom
snyk-fix-aa136c61b5614c9f7a8f815886eab0f4

Conversation

@somidax

@somidax somidax commented Sep 16, 2024

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to fix 21 vulnerabilities in the pip dependencies of this project.

Snyk changed the following file(s):

  • scripts/requirements.txt
⚠️ Warning
eth-tester 0.1.0b21 has requirement eth-utils<2.0.0,>=1.0.1, but you have eth-utils 0.7.4.
eth-keys 0.2.0b3 has requirement eth-utils<2.0.0,>=1.0.0-beta.2, but you have eth-utils 0.7.4.
eth-keyfile 0.6.0 has requirement eth-utils<3,>=2, but you have eth-utils 0.7.4.
eth-keyfile 0.6.0 has requirement eth-keys<0.5.0,>=0.4.0, but you have eth-keys 0.2.0b3.
eth-abi 4.2.1 has requirement eth-utils>=2.0.0, but you have eth-utils 0.7.4.

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)
🦉 Use of a Broken or Risky Cryptographic Algorithm
🦉 CRLF injection

[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"certifi","from":"2018.1.18","to":"2023.7.22"},{"name":"eth-abi","from":"0.5.0","to":"5.0.1"},{"name":"eth-keyfile","from":"0.5.1","to":"0.6.0"},{"name":"idna","from":"2.6","to":"3.7"},{"name":"pycryptodome","from":"3.4.11","to":"3.19.1"},{"name":"requests","from":"2.18.4","to":"2.32.2"},{"name":"urllib3","from":"1.22","to":"1.26.19"}],"env":"prod","issuesToFix":[{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-CERTIFI-3164749","priority_score":554,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.8","score":340},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Insufficient Verification of Data Authenticity"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-CERTIFI-5805047","priority_score":704,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"9.8","score":490},{"type":"scoreVersion","label":"v1","score":1}],"severity":"critical","title":"Improper Following of a Certificate's Chain of Trust"},{"exploit_maturity":"Proof of Concept","id":"SNYK-PYTHON-ETHABI-6085292","priority_score":536,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"4.3","score":215},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Denial of Service (DoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-PYTHON-ETHABI-6394102","priority_score":586,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Resource Exhaustion"},{"exploit_maturity":"Proof of Concept","id":"SNYK-PYTHON-ETHABI-6085292","priority_score":536,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"4.3","score":215},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Denial of Service (DoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-PYTHON-ETHABI-6394102","priority_score":586,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Resource Exhaustion"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-ETHKEYFILE-2391482","priority_score":399,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"3.7","score":185},{"type":"scoreVersion","label":"v1","score":1}],"severity":"low","title":"Timing Attack"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-ETHKEYFILE-2391482","priority_score":399,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"3.7","score":185},{"type":"scoreVersion","label":"v1","score":1}],"severity":"low","title":"Timing Attack"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-IDNA-6597975","priority_score":524,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.2","score":310},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Resource Exhaustion"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-PYCRYPTODOME-42184","priority_score":589,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Denial of Service (DoS)"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-PYCRYPTODOME-6145007","priority_score":509,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.9","score":295},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Observable Timing Discrepancy"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-PYCRYPTODOME-6219994","priority_score":549,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.7","score":335},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Use of a Broken or Risky Cryptographic Algorithm"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-PYCRYPTODOME-42184","priority_score":589,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Denial of Service (DoS)"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-PYCRYPTODOME-6145007","priority_score":509,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.9","score":295},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Observable Timing Discrepancy"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-PYCRYPTODOME-6219994","priority_score":549,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.7","score":335},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Use of a Broken or Risky Cryptographic Algorithm"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-REQUESTS-5595532","priority_score":519,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.1","score":305},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Information Exposure"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-REQUESTS-6928867","priority_score":494,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.6","score":280},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Always-Incorrect Control Flow Implementation"},{"exploit_maturity":"Proof of Concept","id":"SNYK-PYTHON-REQUESTS-72435","priority_score":811,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"9.8","score":490},{"type":"scoreVersion","label":"v1","score":1}],"severity":"critical","title":"Information Exposure"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-URLLIB3-1014645","priority_score":599,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.7","score":385},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"HTTP Header Injection"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-URLLIB3-1533435","priority_score":479,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"Mature","id":"SNYK-PYTHON-URLLIB3-174323","priority_score":794,"priority_score_factors":[{"type":"exploit","label":"High","score":214},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.3","score":365},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"CRLF injection"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-URLLIB3-174464","priority_score":589,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Certificate Validation"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-URLLIB3-5926907","priority_score":509,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.9","score":295},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Information Exposure Through Sent Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-URLLIB3-5969479","priority_score":584,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.4","score":370},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Information Exposure Through Sent Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-URLLIB3-6002459","priority_score":424,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"4.2","score":210},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Information Exposure Through Sent Data"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-URLLIB3-7267250","priority_score":514,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6","score":300},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Improper Removal of Sensitive Information Before Storage or Transfer"},{"exploit_maturity":"No Known Exploit","id":"SNYK-PYTHON-URLLIB3-72681","priority_score":509,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.9","score":295},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Authentication Bypass"}],"prId":"799e2d67-250c-4e23-a250-1414491be4e9","prPublicId":"799e2d67-250c-4e23-a250-1414491be4e9","packageManager":"pip","priorityScoreList":[554,704,536,586,399,524,589,509,549,519,494,811,599,479,794,589,509,584,424,514,509],"projectPublicId":"c799ea47-03eb-42c8-a79c-846f25264598","projectUrl":"https://app.snyk.io/org/somidax/project/c799ea47-03eb-42c8-a79c-846f25264598?utm_source=github&utm_medium=referral&page=fix-pr","prType":"fix","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["pr-warning-shown","priorityScore"],"type":"auto","upgrade":[],"vulns":["SNYK-PYTHON-CERTIFI-3164749","SNYK-PYTHON-CERTIFI-5805047","SNYK-PYTHON-ETHABI-6085292","SNYK-PYTHON-ETHABI-6394102","SNYK-PYTHON-ETHKEYFILE-2391482","SNYK-PYTHON-IDNA-6597975","SNYK-PYTHON-PYCRYPTODOME-42184","SNYK-PYTHON-PYCRYPTODOME-6145007","SNYK-PYTHON-PYCRYPTODOME-6219994","SNYK-PYTHON-REQUESTS-5595532","SNYK-PYTHON-REQUESTS-6928867","SNYK-PYTHON-REQUESTS-72435","SNYK-PYTHON-URLLIB3-1014645","SNYK-PYTHON-URLLIB3-1533435","SNYK-PYTHON-URLLIB3-174323","SNYK-PYTHON-URLLIB3-174464","SNYK-PYTHON-URLLIB3-5926907","SNYK-PYTHON-URLLIB3-5969479","SNYK-PYTHON-URLLIB3-6002459","SNYK-PYTHON-URLLIB3-7267250","SNYK-PYTHON-URLLIB3-72681"],"patch":[],"isBreakingChange":false,"remediationStrategy":"vuln"}'

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants