[Starlingx-discuss] [distcloud-client][security] security vulnerability detected by GitHub

Qian, Bin Bin.Qian at windriver.com
Wed Feb 5 21:09:42 UTC 2020


Hello,

As part of the activity to upload Startlingx repos to GitHub mirror, the distcloud-client is now uploaded to GitHub [1].

Please be aware that there are total 3 vulnerabilities detected by GitHub during the upload.
1. Known moderate severity security vulnerability detected in SQLAlchemy < 1.3.0 defined in requirements.txt<https://github.com/starlingx/distcloud-client/blob/master/requirements.txt>.
2. Known moderate severity security vulnerability detected in requests <= 2.19.1 defined in requirements.txt<https://github.com/starlingx/distcloud-client/blob/master/distributedcloud-client/requirements.txt>.
3. Known moderate severity security vulnerability detected in SQLAlchemy < 1.3.0 defined in requirements.txt<https://github.com/starlingx/distcloud-client/blob/master/requirements.txt>.

Do we have planned actions to take care of the vulnerabilities?

Best regards,

Bin

[1] https://github.com/starlingx/distcloud-client


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20200205/67e5ddc0/attachment.html>


More information about the Starlingx-discuss mailing list