Skip to content

Conversation

@patched-admin
Copy link
Contributor

@patched-admin patched-admin commented Aug 21, 2024

This pull request from patched fixes 3 issues.


  • File changed: patchwork/app.py
    Fix vulnerability by avoiding dynamic values in importlib.import_module() Avoided dynamic values in importlib.import_module() to prevent running untrusted code by using a whitelist approach.
  • File changed: patchwork/common/utils/step_typing.py
    Fix vulnerability by avoiding dynamic values in importlib.import_module() Avoided using dynamic values in importlib.import_module() by hardcoding the module name to prevent loading arbitrary code.
  • File changed: patchwork/common/utils/dependency.py
    Fix vulnerability by avoiding dynamic values in importlib.import_module() Avoid using dynamic values in importlib.import_module() by ensuring that only whitelisted module names are passed to the function.

@patched-codes patched-codes bot force-pushed the patchwork-generatedocstringmain branch from 4af9a91 to 3dbc305 Compare August 22, 2024 00:30
@github-actions github-actions bot force-pushed the autofix-patchwork-generatedocstringmain branch from 962187f to 095d61f Compare August 22, 2024 00:32
@patched-codes patched-codes bot force-pushed the patchwork-generatedocstringmain branch from 3dbc305 to 0036ba5 Compare August 22, 2024 00:36
@github-actions github-actions bot force-pushed the autofix-patchwork-generatedocstringmain branch from 095d61f to ac6a0ca Compare August 22, 2024 00:37
@patched-codes patched-codes bot force-pushed the patchwork-generatedocstringmain branch from 0036ba5 to 957b7cd Compare August 22, 2024 00:38
@github-actions github-actions bot force-pushed the autofix-patchwork-generatedocstringmain branch from ac6a0ca to 565e0ff Compare August 22, 2024 00:39
@patched-codes patched-codes bot force-pushed the patchwork-generatedocstringmain branch from 957b7cd to f173b11 Compare August 22, 2024 00:41
@github-actions github-actions bot force-pushed the autofix-patchwork-generatedocstringmain branch from 565e0ff to e706275 Compare August 22, 2024 00:42
@CTY-git CTY-git closed this Aug 22, 2024
@CTY-git CTY-git deleted the autofix-patchwork-generatedocstringmain branch August 22, 2024 17:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants