Skip to content

Commit

Permalink
[Snyk] Security upgrade fiona from 1.9.6 to 1.10b2 (#388)
Browse files Browse the repository at this point in the history
<p>This PR was automatically created by Snyk using the credentials of a
real user.</p><br
/>![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

### Snyk has created this PR to fix 1 vulnerabilities in the pip
dependencies of this project.

#### Snyk changed the following file(s):

- `requirements.txt`



<details>
<summary>⚠️ <b>Warning</b></summary>
```
pywps 4.5.2 requires werkzeug, which is not installed.
pywps 4.5.2 requires fiona, which is not installed.
geotiff 0.2.10 requires pyproj, which is not installed.
geopandas 0.10.2 requires fiona, which is not installed.
geopandas 0.10.2 requires pyproj, which is not installed.

```
</details>





---

> [!IMPORTANT]
>
> - Check the changes in this PR to ensure they won't cause issues with
your project.
> - Max score is 1000. Note that the real score may have changed since
the PR was raised.
> - This PR was automatically created by Snyk using the credentials of a
real user.
> - Some vulnerabilities couldn't be fully fixed and so Snyk will still
find them when the project is tested again. This may be because the
vulnerability existed within more than one direct dependency, but not
all of the affected dependencies could be upgraded.

---

**Note:** _You are seeing this because you or someone else with access
to this repository has authorized Snyk to open fix PRs._

For more information: <img
src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiJlNzMwZjFmOC0yZDk2LTRhNDItOTc1NC0zZDgyOWYzNzgwYTUiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6ImU3MzBmMWY4LTJkOTYtNGE0Mi05NzU0LTNkODI5ZjM3ODBhNSJ9fQ=="
width="0" height="0"/>
🧐 [View latest project
report](https://app.snyk.io/org/fmigneault/project/3faa71f1-0716-4250-bb91-6b2c3b37d7b5?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;fix-pr)
📜 [Customise PR
templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates)
🛠 [Adjust project
settings](https://app.snyk.io/org/fmigneault/project/3faa71f1-0716-4250-bb91-6b2c3b37d7b5?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;fix-pr/settings)
📚 [Read about Snyk's upgrade
logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities)

---

**Learn how to fix vulnerabilities with free interactive lessons:**

🦉 [Denial of Service
(DoS)](https://learn.snyk.io/lesson/redos/?loc&#x3D;fix-pr)

[//]: #
'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"fiona","from":"1.9.6","to":"1.10b2"}],"env":"prod","issuesToFix":[{"exploit_maturity":"No
Known
Exploit","id":"SNYK-PYTHON-FIONA-7462744","priority_score":631,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.9","score":345},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Denial
of Service
(DoS)"}],"prId":"e730f1f8-2d96-4a42-9754-3d829f3780a5","prPublicId":"e730f1f8-2d96-4a42-9754-3d829f3780a5","packageManager":"pip","priorityScoreList":[631],"projectPublicId":"3faa71f1-0716-4250-bb91-6b2c3b37d7b5","projectUrl":"https://app.snyk.io/org/fmigneault/project/3faa71f1-0716-4250-bb91-6b2c3b37d7b5?utm_source=github&utm_medium=referral&page=fix-pr","prType":"fix","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["updated-fix-title","pr-warning-shown","priorityScore"],"type":"auto","upgrade":[],"vulns":["SNYK-PYTHON-FIONA-7462744"],"patch":[],"isBreakingChange":false,"remediationStrategy":"vuln"}'
  • Loading branch information
Zeitsperre authored Dec 17, 2024
2 parents 5d44cbb + 899d45f commit 372a548
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -24,3 +24,4 @@ setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerabil
werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability
zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
fiona>=1.10b2 # not directly required, pinned by Snyk to avoid a vulnerability

0 comments on commit 372a548

Please sign in to comment.