[Snyk] Security upgrade urllib3 from 1.23 to 1.24.3 by Hackman238 · Pull Request #1 · Hackman238/legion

Hackman238 · 2024-10-31T22:57:42Z

Snyk has created this PR to fix 1 vulnerabilities in the pip dependencies of this project.

Snyk changed the following file(s):

requirements.txt

⚠️

Warning

flake8 5.0.4 has requirement importlib-metadata<4.3,>=1.1.0; python_version < "3.8", but you have importlib-metadata 6.7.0.

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.
Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 CRLF injection

Changed links to govanguard.com, added Keybase team link.

- Addresses github issue #18

…c-bug-#18 Fix complex predicate bug

Update README typos and line wrapping

Merge latest dev into master

- Ran ui/eventfilter.py through CodeClimate CLI and is no longer showing any cognitive complexity issues in the logic

- The file was not loaded correctly by Legion on startup due to an error with a trailing single quote

- GitHub issue #19 - Introduce concept of Shell - which should abstract all operations pertaining to lower level OS calls, e.g. creating/removing directories, etc. - This commit does not close issue #19 but is part of a series of commits to spend down the technical debt surrounding `logic.py` file

- This commit is the 2nd iteration on reducing complexity of `logic.py` - Introduces the concept of a repository. A repository is an abstraction on a data store. In the case of Legion, the underlying data store is based on SQLite, and so the repository implementations should contain all SQL code within the app. - There is a repository for each concept within the app, such as a Process, a Service, a Host, a Port, etc. (e.g. ProcessRepository, HostRepository, etc.) - This commit does not complete the full refactoring of all SQL related code to a repository. Further commits will be added to complete the work. - All new code added was driven by an underlying unit test. In order to gain confidence in proper refactoring of existing logic, a backporting of unit tests was needed.

…c-bug-#18 Fix complexity bug in eventfilter

Fix unbalanced tickmark issue in legion.conf

…sue-19 Reduce cognitive complexity on logic.py

…sue-19-2nd-iter Refactoring logic.py into smaller components

…e-cert-errors Added Cutycapt --insecure flag to ignore SSL/TLS certificate errors

…ate-progress-crash-1 Fix updateProgress to always use an integer

fix bad interpreter: /bin/bash^M: no such file or directory

Removed old dead links.

…test with

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-174323

Wire app/validation.py functions into Flask routes: - validateNmapInput in /api/nmap/scan: rejects XSS, semicolons, special chars in target strings → 400 - Port number validation in add-port action: rejects non-numeric, 0, and >65535 → 400 - validateNmapPorts in _validate_legion_conf for [StagedNmapSettings] keys: rejects invalid chars in stage port expressions Add 10 new API tests (P8.1–P8.10) to test_api_gaps.py. Total: 45 passing. Update FULL_PYTHON_FILE_AUDIT.md gaps Hackman238#1, Hackman238#2, Hackman238#7 as fixed. Bump version to v9.6-flask. Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

web-flow and others added 30 commits June 13, 2019 10:54

Fixing potential AttributeError

e8dc50c

Added back all Hydra functions

ceaed76

Added dialogue for Hydra usage

12fa653

Added theharvester

bbd6e5a

Added theharvester

d8affa0

Enabled host multi selection

c4b21be

Addressing cognitive complexity

bc184e9

Attribute error in findFinishedServiceTab function

7e33c3d

Fixed typo

b087f79

Update README.md

dd01a37

Regression fixed

5607b06

Msgbox fix

3cf33bf

Msgbox fix

7b2e78a

Cleanup trash

55e0e2f

Update README.md

561b37a

Changed links to govanguard.com, added Keybase team link.

Update README typos and line wrapping

a63eb06

Fix complex predicate bug

0404068

- Addresses github issue #18

Updating govanguard.io links to govanguard.com

c37a287

Merge pull request Abacus-Group-RTO#118 from ddubson/bug/complex-logi…

cd576b6

…c-bug-#18 Fix complex predicate bug

Merge pull request Abacus-Group-RTO#117 from ddubson/fix-typos

91a7877

Update README typos and line wrapping

Merge branch 'master' into development

859a3af

Merge pull request Abacus-Group-RTO#119 from GoVanguard/development

e7fe8cd

Merge latest dev into master

Fix complexity bug in eventfilter

a219ccc

- Ran ui/eventfilter.py through CodeClimate CLI and is no longer showing any cognitive complexity issues in the logic

Fix unbalanced tickmark issue in legion.conf

e03aaf4

- The file was not loaded correctly by Legion on startup due to an error with a trailing single quote

Merge pull request Abacus-Group-RTO#121 from ddubson/bug/complex-logi…

75d233b

…c-bug-#18 Fix complexity bug in eventfilter

Merge pull request Abacus-Group-RTO#122 from ddubson/fix-conf-file-issue

497d775

Fix unbalanced tickmark issue in legion.conf

Merge pull request Abacus-Group-RTO#123 from ddubson/complex-logic-is…

77d7d99

…sue-19 Reduce cognitive complexity on logic.py

Merge pull request Abacus-Group-RTO#124 from ddubson/complex-logic-is…

b9d9612

…sue-19-2nd-iter Refactoring logic.py into smaller components

sscottgvit and others added 27 commits July 7, 2022 08:22

Merge pull request Abacus-Group-RTO#224 from t3chn0t3s/cutycapt-ignor…

c6d8681

…e-cert-errors Added Cutycapt --insecure flag to ignore SSL/TLS certificate errors

Ensure progress is cast to an int

2036043

Merge pull request Abacus-Group-RTO#229 from dcarlsongvit/resolve-upd…

c4a940d

…ate-progress-crash-1 Fix updateProgress to always use an integer

Update medium_scope_custom_ports.conf

66e983b

Update README.md

d59a291

Update README.md

cea6969

Update README.md

62627a0

Update to release 0.3.8

9d665ba

:Merge branch 'master' of github.com:GoVanguard/legion

d8bbb68

Update to release 0.3.8

1e9add6

Update to release 0.3.9

cd190fb

fix bad interpreter: /bin/bash^M: no such file or directory

cceb9fc

Merge pull request Abacus-Group-RTO#232 from seunghaekim-duse/master

af199bf

fix bad interpreter: /bin/bash^M: no such file or directory

Update README.md

4d40498

Removed old dead links.

Updated to PyQt6, more to come

0f202e2

Tons of updates

dde87f0

Update debian build bits

2439acb

Update README.md

f88c6dc

Update README.md

cc87e77

Minor fixes for last update

a60070d

Merge branch 'master' of github.com:GoVanguard/legion

7167d39

Spelling

e27480c

Updates, cleanup, fixes

df4f0d7

Updates to nmap importer, add script to build huge bogus nmap XML to …

83a253f

…test with

Updates

15b6bd2

Update details related to copyright, attribution, repo move, etc

86ddbd7

fix: requirements.txt to reduce vulnerabilities

1fc0762

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-174323

sscottgvit force-pushed the master branch from d185cda to c7320dc Compare November 4, 2024 19:58

Hackman238 mentioned this pull request Nov 5, 2024

list index out of range #25

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Security upgrade urllib3 from 1.23 to 1.24.3#1

[Snyk] Security upgrade urllib3 from 1.23 to 1.24.3#1
Hackman238 wants to merge 543 commits into
masterfrom
snyk-fix-1c8184b928ce38e7a9cd40b45bc9c398

Hackman238 commented Oct 31, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

16 participants

Conversation

Hackman238 commented Oct 31, 2024

Snyk has created this PR to fix 1 vulnerabilities in the pip dependencies of this project.

Snyk changed the following file(s):

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

16 participants