Comments (1)
harlekeyn
commented on September 1, 2024
Hi Bill,
Thank you for bringing this to our attention. Indeed, the vulnerability you referred to was temporarily omitted from our database. We appreciate your vigilance in this matter.
We have promptly reinstated this vulnerability and it should be visible again in your scans by tomorrow.
For those following this discussion, "insecure-package" is not a genuine package but rather a placeholder created exclusively for testing Safety's functionality. Despite its name, it poses no risk.
Once again, thank you for your diligent reporting. Your active involvement aids in maintaining the accuracy and integrity of our vulnerability database.
Tristan
from safety-db.
Related Issues (20)
- Auto monthly pypi push HOT 1
- Numpy fails safety HOT 3
- Optimade v0.16.9 listed incorrectly as unsafe HOT 3
- update db more often HOT 1
- Issue with insecure django-oauth-toolkit library HOT 10
- 47833: You report that click is vulnerable, but the authors dont know about it? HOT 1
- Missing May update? HOT 1
- Wrong version identifier in vulnerabilities pyup.io-34226 & pyup.io-49495 HOT 1
- dparse v0.6.1 showing as im HOT 1
- kubernetes vulnerabilities is stale - CVE-2021-29923/45114 HOT 1
- Zulip : wrong version evaluation HOT 1
- Unable to install with Pipenv
- safetydb website given in Readme is down 404 HOT 1
- 9-month-old withdrawn CVE for aiohttp added to safety-db HOT 2
- False Positive for scrapy Vulnerability HOT 1
- Adjust vulnerable versions of Inquirer for CVE-2022-24439
- Question: why was the vulnerability on jsonpickle<=1.4.1 removed in last november?
- Safety Django link in the README is broken
- False positive for CVE-2023-6129
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from safety-db.