You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Commit scanned: 10586c6
ℹ️ Python version 3.10 is used by your project but the latest version is 3.12.
Vulnerable dependencies
5 dependencies have vulnerabilities 😱
Dependency
Advisory
Versions impacted
djangorestframework (transitive)
Affected versions of the package djangorestframework are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with tags.
<3.15.2
jinja2 (transitive)
In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.
>=0
pyopenssl (transitive)
CVE-2023-6129 affects PyOpenSSL versions starting from 22.0.0 due to a vulnerability in the POLY1305 MAC algorithm on PowerPC CPUs. This issue could lead to state corruption in applications, causing inaccurate outcomes or service disruptions. Attackers need specific conditions to exploit this flaw, including the ability to manipulate the algorithm's use and reliance on certain system registers by the application.
>=22.0.0
setuptools (transitive)
Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
<70.0.0
sqlalchemy
Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. sqlalchemy/sqlalchemy#8563
<2.0.0b1
Outdated dependencies
49 outdated dependencies found (including 16 outdated major versions)😢
According to short discussion in MS Teams, resizing does not work in this state. I could confirm this. The problem appears to be that with the following, the handle overlaps with the left-side menu which somehow prevents the drawer to react to drag-and-resize. The solution is to wrap the contents into a <div class="ml-3"> so there is sufficient space for the handle.
I added a commit to this PR which splits the SeqvarDetails component so we can include the <v-row> data without a wrapping <v-main><v-container> which might also be useful but not strictly necessary. This could be undone.
However, the layout of the contained SeqvarDetails does not work with being embedded within a too narrow window. We probably need to integrate more of the UI changes from Jurijs.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.