[Starlingx-discuss] [distcloud-client][security] security vulnerability detected by GitHub
Qian, Bin
Bin.Qian at windriver.com
Wed Feb 5 21:09:42 UTC 2020
Hello,
As part of the activity to upload Startlingx repos to GitHub mirror, the distcloud-client is now uploaded to GitHub [1].
Please be aware that there are total 3 vulnerabilities detected by GitHub during the upload.
1. Known moderate severity security vulnerability detected in SQLAlchemy < 1.3.0 defined in requirements.txt<https://github.com/starlingx/distcloud-client/blob/master/requirements.txt>.
2. Known moderate severity security vulnerability detected in requests <= 2.19.1 defined in requirements.txt<https://github.com/starlingx/distcloud-client/blob/master/distributedcloud-client/requirements.txt>.
3. Known moderate severity security vulnerability detected in SQLAlchemy < 1.3.0 defined in requirements.txt<https://github.com/starlingx/distcloud-client/blob/master/requirements.txt>.
Do we have planned actions to take care of the vulnerabilities?
Best regards,
Bin
[1] https://github.com/starlingx/distcloud-client
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20200205/67e5ddc0/attachment.html>
More information about the Starlingx-discuss
mailing list