reflex/0.6.2 package update - #30309
Conversation
Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
|
Open AI suggestions to solve the build error: |
… CI, and the binary doesn't expose a --version endpoint Signed-off-by: Mark McCormick <mark.mccormick@chainguard.dev>
Package reflex: Click to expand/collapsePackage reflex:
(
"""
# Generated by melange
pkgname = reflex
- pkgver = 0.6.1-r0
+ pkgver = 0.6.2-r0
arch = x86_64
- size = 445659308
+ size = 445301034
origin = reflex
pkgdesc = Web apps in pure Python
url =
- commit = 4592294ec3d7fdd3934a8653d4cea3374e800046
- builddate = 1727774264
+ commit = 9cfde1d7a4a449a118bfa04eae0507392a6bd1d9
+ builddate = 1728423979
license = Apache-2.0
depend = bash
... // 11 identical lines
depend = so:libz.so.1
depend = wget
- provides = cmd:alembic=0.6.1-r0
- provides = cmd:coverage-3.12=0.6.1-r0
- provides = cmd:coverage3=0.6.1-r0
- provides = cmd:coverage=0.6.1-r0
- provides = cmd:cpuinfo=0.6.1-r0
- provides = cmd:darglint=0.6.1-r0
- provides = cmd:distro=0.6.1-r0
- provides = cmd:docutils=0.6.1-r0
- provides = cmd:f2py=0.6.1-r0
- provides = cmd:fastapi=0.6.1-r0
- provides = cmd:get_gprof=0.6.1-r0
- provides = cmd:get_objgraph=0.6.1-r0
- provides = cmd:gunicorn=0.6.1-r0
- provides = cmd:httpx=0.6.1-r0
- provides = cmd:identify-cli=0.6.1-r0
- provides = cmd:keyring=0.6.1-r0
- provides = cmd:mako-render=0.6.1-r0
- provides = cmd:markdown-it=0.6.1-r0
- provides = cmd:nodeenv=0.6.1-r0
- provides = cmd:normalizer=0.6.1-r0
- provides = cmd:numpy-config=0.6.1-r0
- provides = cmd:pip3.12=0.6.1-r0
- provides = cmd:pip3=0.6.1-r0
- provides = cmd:pip=0.6.1-r0
- provides = cmd:pipdeptree=0.6.1-r0
- provides = cmd:pkginfo=0.6.1-r0
- provides = cmd:playwright=0.6.1-r0
- provides = cmd:pre-commit=0.6.1-r0
- provides = cmd:py.test-benchmark=0.6.1-r0
- provides = cmd:py.test=0.6.1-r0
- provides = cmd:pygmentize=0.6.1-r0
- provides = cmd:pyproject-build=0.6.1-r0
- provides = cmd:pyright-langserver=0.6.1-r0
- provides = cmd:pyright-python-langserver=0.6.1-r0
- provides = cmd:pyright-python=0.6.1-r0
- provides = cmd:pyright=0.6.1-r0
- provides = cmd:pytest-benchmark=0.6.1-r0
- provides = cmd:pytest=0.6.1-r0
- provides = cmd:reflex=0.6.1-r0
- provides = cmd:rst2html4=0.6.1-r0
- provides = cmd:rst2html5=0.6.1-r0
- provides = cmd:rst2html=0.6.1-r0
- provides = cmd:rst2latex=0.6.1-r0
- provides = cmd:rst2man=0.6.1-r0
- provides = cmd:rst2odt=0.6.1-r0
- provides = cmd:rst2pseudoxml=0.6.1-r0
- provides = cmd:rst2s5=0.6.1-r0
- provides = cmd:rst2xetex=0.6.1-r0
- provides = cmd:rst2xml=0.6.1-r0
- provides = cmd:ruff=0.6.1-r0
- provides = cmd:slugify=0.6.1-r0
- provides = cmd:tabulate=0.6.1-r0
- provides = cmd:twine=0.6.1-r0
- provides = cmd:typer=0.6.1-r0
- provides = cmd:undill=0.6.1-r0
- provides = cmd:uvicorn=0.6.1-r0
- provides = cmd:virtualenv=0.6.1-r0
- provides = cmd:wheel=0.6.1-r0
- provides = cmd:wsdump=0.6.1-r0
- # vendored = pc:numpy=0.6.1-r0
+ provides = cmd:alembic=0.6.2-r0
+ provides = cmd:coverage-3.12=0.6.2-r0
+ provides = cmd:coverage3=0.6.2-r0
+ provides = cmd:coverage=0.6.2-r0
+ provides = cmd:cpuinfo=0.6.2-r0
+ provides = cmd:darglint=0.6.2-r0
+ provides = cmd:distro=0.6.2-r0
+ provides = cmd:docutils=0.6.2-r0
+ provides = cmd:f2py=0.6.2-r0
+ provides = cmd:fastapi=0.6.2-r0
+ provides = cmd:gunicorn=0.6.2-r0
+ provides = cmd:httpx=0.6.2-r0
+ provides = cmd:identify-cli=0.6.2-r0
+ provides = cmd:keyring=0.6.2-r0
+ provides = cmd:mako-render=0.6.2-r0
+ provides = cmd:markdown-it=0.6.2-r0
+ provides = cmd:nodeenv=0.6.2-r0
+ provides = cmd:normalizer=0.6.2-r0
+ provides = cmd:numpy-config=0.6.2-r0
+ provides = cmd:pip3.12=0.6.2-r0
+ provides = cmd:pip3=0.6.2-r0
+ provides = cmd:pip=0.6.2-r0
+ provides = cmd:pipdeptree=0.6.2-r0
+ provides = cmd:pkginfo=0.6.2-r0
+ provides = cmd:playwright=0.6.2-r0
+ provides = cmd:pre-commit=0.6.2-r0
+ provides = cmd:py.test-benchmark=0.6.2-r0
+ provides = cmd:py.test=0.6.2-r0
+ provides = cmd:pygmentize=0.6.2-r0
+ provides = cmd:pyproject-build=0.6.2-r0
+ provides = cmd:pyright-langserver=0.6.2-r0
+ provides = cmd:pyright-python-langserver=0.6.2-r0
+ provides = cmd:pyright-python=0.6.2-r0
+ provides = cmd:pyright=0.6.2-r0
+ provides = cmd:pytest-benchmark=0.6.2-r0
+ provides = cmd:pytest=0.6.2-r0
+ provides = cmd:reflex=0.6.2-r0
+ provides = cmd:rst2html4=0.6.2-r0
+ provides = cmd:rst2html5=0.6.2-r0
+ provides = cmd:rst2html=0.6.2-r0
+ provides = cmd:rst2latex=0.6.2-r0
+ provides = cmd:rst2man=0.6.2-r0
+ provides = cmd:rst2odt=0.6.2-r0
+ provides = cmd:rst2pseudoxml=0.6.2-r0
+ provides = cmd:rst2s5=0.6.2-r0
+ provides = cmd:rst2xetex=0.6.2-r0
+ provides = cmd:rst2xml=0.6.2-r0
+ provides = cmd:ruff=0.6.2-r0
+ provides = cmd:slugify=0.6.2-r0
+ provides = cmd:tabulate=0.6.2-r0
+ provides = cmd:twine=0.6.2-r0
+ provides = cmd:typer=0.6.2-r0
+ provides = cmd:uvicorn=0.6.2-r0
+ provides = cmd:virtualenv=0.6.2-r0
+ provides = cmd:wheel=0.6.2-r0
+ provides = cmd:wsdump=0.6.2-r0
+ # vendored = pc:numpy=0.6.2-r0
... // 22 identical, 1 removed, and 1 inserted lines
"""
)
Added: /usr/lib/python3.12/site-packages/MarkupSafe-3.0.1.dist-info/INSTALLER malcontent found differences: Click to expand/collapseDeleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_module.py [
|
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval(str, |
| -LOW | fs/directory/list | lists contents of a directory | .listdir( |
| -LOW | fs/file/delete | deletes files | os.remove( |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/pointers.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/main.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | exec/program | execute external program | subprocess |
| -MEDIUM | kernel/platform | system platform identification | sys.platform |
| -MEDIUM | process/executable_path | gets executable associated to this process | sys.executable |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_moduledict.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_source.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | evasion/lib_alias | aliases core python library to an alternate name | from io import BytesIO as StringIO |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/init.py [🔥 HIGH]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -HIGH | admin/pip_install | Installs software using pip from python | pip install |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/bin/get_objgraph [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | fs/file/read | opens a binary file for read | open(objtype,'rb') |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/python3.12 |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/__diff.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_classdef.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec("""class |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_functions.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec(''' |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/logger.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/_dill.py [⚠️ MEDIUM]
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_dataclasses.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/settings.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/objtypes.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec(" |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/info.py [🔥 HIGH]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -HIGH | admin/pip_install | Installs software using pip from python | pip install dill |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE https://github.com/uqfoundation/dill/issues https://pypi.org/project/dill https://uqfoundation.github.io/project/pathos/query. |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/source.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | evasion/single_line_imports | imports built-in and executes more code on the same line | import dill; |
| -MEDIUM | kernel/platform | system platform identification | sys.platform |
| -MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval("lambda eval(getsource(f, eval(lines |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_abc.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/_shims.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | exec/shell_command | execute a shell command | system |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://docs.python.org/3/library/pickle.html https://github.com/uqfoundation/dill/blob/master/LICENSE uqfoundation/dill#443 |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_fglobals.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | evasion/py_builtins | references Python builtins | builtins |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_properties.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_restricted.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_pycapsule.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/temp.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | evasion/lib_alias | aliases core python library to an alternate name | from io import BytesIO as StringIO |
| -MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval(" |
| -LOW | fd/read | reads from a file handle | kwds).read() |
| -LOW | fs/file/open | opens files | open( |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_sources.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec(ds |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | python/cpython#118888 https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_detect.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | evasion/py_builtins | references Python builtins | builtins |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_logger.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | fd/read | reads from a file handle | file.read() |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/init.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/session.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | exec/program | execute external program | subprocess |
| -MEDIUM | fs/file/read | opens a binary file for read | open(filename, 'rb') |
| -MEDIUM | process/multiprocess | uses python multiprocessing | multiprocessing |
| -MEDIUM | ref/path/tmp | path reference within /tmp | /tmp/session.pkl |
| -LOW | evasion/py_builtins | references Python builtins | builtins |
| -LOW | fs/file/open | opens files | open( |
| -LOW | fs/tempdir | looks up location of temp directory | TEMPDIR gettempdir |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_selected.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/reflex-0.6.1.dist-info/direct_url.json [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/file/url | file url | file:///home |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_threads.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | process/multithreaded | uses python threading | threading.Thread |
| -MEDIUM | ref/daemon | Run as a background daemon | daemon |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/_objects.py [⚠️ MEDIUM]
Deleted: reflex/usr/bin/get_gprof [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | evasion/single_line_imports | imports built-in and executes more code on the same line | import math; import numpy; |
| -MEDIUM | exec/program | execute external program | os.system(msg) |
| -MEDIUM | exec/shell_command | execute a shell command | system |
| -MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval(obj |
| -LOW | fs/file/delete | deletes files | os.remove( |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/python3.12 |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_session.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | evasion/lib_alias | aliases core python library to an alternate name | from cmath import log as complex_log |
| -MEDIUM | exec/program | execute external program | subprocess |
| -LOW | fs/file/delete | deletes files | os.remove( |
| -LOW | net/url | Handles URL strings | urllib |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_check.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_functors.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_registered.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_extendpickle.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | evasion/lib_alias | aliases core python library to an alternate name | from io import BytesIO as StringIO |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_dictviews.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/bin/undill [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | fs/file/read | opens a binary file for read | open(file,'rb') |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/python3.12 |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_weakref.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | fs/file/copy | copy files using cp | cp |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_mixins.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_objects.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_file.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | fd/read | reads from a file handle | _f.read() f2.read() open(fname).read() |
| -LOW | fs/file/delete | deletes files | os.remove( |
| -LOW | fs/file/open | opens files | open( |
| -LOW | fs/file/read | opens a file for read | open(fname).read() |
| -LOW | fs/file/write | writes to a file | open(fname, "a") open(fname, "w") |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_recursive.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_nested.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | fs/directory/list | lists contents of a directory | .listdir( |
| -LOW | fs/file/delete | deletes files | os.remove( |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_temp.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | kernel/platform | system platform identification | sys.platform |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://bugs.python.org/issue14243 https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/detect.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | evasion/lib_alias | aliases core python library to an alternate name | from inspect import getmodule as getmod |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Deleted: reflex/usr/lib/python3.12/site-packages/dill/tests/test_diff.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | evasion/lib_alias | aliases core python library to an alternate name | from dill import __diff as diff |
| -LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Added: reflex/usr/lib/python3.12/site-packages/reflex/istate/data.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | combo/recon/system_network | invasive recon val | ip = route |
| +MEDIUM | ref/words/agent | references an 'agent' | user_agent |
Added: reflex/usr/lib/python3.12/site-packages/reflex-0.6.2.dist-info/direct_url.json [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/path/file/url | file url | file:///home |
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/setuptools/cli.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/httpx/_transports/default.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/psutil/tests/runner.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/nh3/nh3.abi3.so
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy/tests/test_public_api.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/setuptools/build_meta.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/starlette_admin/fields.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy/f2py/tests/test_kind.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/httpx/init.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy/f2py/tests/test_data.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pre_commit/resources/ruby-build.tar.gz ∴ /ruby-build/bin/ruby-build
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/docutils/writers/latex2e/init.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/async_api/_generated.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/ruff/main.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/setuptools/installer.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_vendor/distlib/w64-arm.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/reflex/utils/prerequisites.py
2 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | fd/read | reads from a file handle | int(f.read() |
| -LOW | fs/file/read | opens a file for read | open(cache_file, "r") open(gitignore_file, "r") open(installation_id_file, "r") |
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/lib/vite/traceViewer/sw.bundle.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/socketio/async_aiopika_manager.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/PIL/JpegImagePlugin.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/reflex/utils/exec.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/setuptools/gui-32.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_internal/locations/_sysconfig.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/lib/generated/consoleApiSource.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/distlib/t64.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/starlette_admin/statics/js/vendor/jquery.min.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/keyring/http.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/docutils/utils/math/unichar2tex.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/PIL/ExifTags.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/node
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy/f2py/tests/test_crackfortran.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/psutil/tests/test_linux.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/requests_toolbelt/adapters/host_header_ssl.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/distlib/w64-arm.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/gunicorn/config.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_internal/commands/completion.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/lib/vite/recorder/assets/codeMirrorModule-BN0yUF4I.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pydantic/networks.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy.libs/libscipy_openblas64_-ff651d7f.so
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/lib/vite/traceViewer/assets/codeMirrorModule-Dg-JD506.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pydantic/v1/networks.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/plotly/io/_orca.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pre_commit/resources/ruby-build.tar.gz ∴ /ruby-build/script/mirror
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy/f2py/crackfortran.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/plotly/io/_kaleido.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/httpx/_decoders.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy/f2py/capi_maps.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/share/jupyter/labextensions/jupyterlab-plotly/static/423.d0d3e2912c33c7566484.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/jaraco/context/init.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/plotly/package_data/plotly.min.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/uvicorn/supervisors/watchgodreload.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/starlette/testclient.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/reflex/init.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_vendor/distlib/t64.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_vendor/distlib/w32.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pillow.libs/libxcb-b8a56d01.so.1.1.0
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/setuptools/gui-arm64.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_internal/index/collector.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/bin/PrintDeps.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_internal/commands/search.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/distlib/w64.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_vendor/distlib/w64.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/bin/reinstall_chrome_stable_linux.sh
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/uvicorn/middleware/wsgi.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/lib/generated/injectedScriptSource.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_vendor/distlib/t64-arm.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/bin/reinstall_msedge_dev_mac.sh
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/fastapi/openapi/models.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/bin/reinstall_chrome_beta_linux.sh
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/httpcore/_async/init.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_vendor/pkg_resources/init.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_internal/wheel_builder.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pandas/core/arrays/arrow/extension_types.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/uvicorn/protocols/http/h11_impl.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/lib/server/formData.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/socketio/kombu_manager.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_vendor/cachecontrol/caches/file_cache.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/setuptools/init.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/setuptools/gui-64.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/uvicorn/protocols/http/httptools_impl.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/lib/utils/isomorphic/cssTokenizer.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy/f2py/tests/test_abstract_interface.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/distlib/w32.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy/f2py/f90mod_rules.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pandas/tests/dtypes/test_generic.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/bin/reinstall_chrome_beta_mac.sh
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/starlette_admin/statics/js/vendor/jsoneditor.min.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/sync_api/_generated.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy/f2py/f2py2e.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/secretstorage/dhcrypto.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/types/protocol.d.ts
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/jupyterlab_plotly/labextension/static/423.d0d3e2912c33c7566484.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/share/jupyter/labextensions/jupyterlab-plotly/static/478.fdc0539db81116781109.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy/f2py/common_rules.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/jupyterlab_plotly/labextension/static/478.fdc0539db81116781109.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/build/env.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_internal/utils/entrypoints.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/main.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_vendor/urllib3/contrib/pyopenssl.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/starlette_admin/statics/js/vendor/pdfmake.min.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_vendor/idna/uts46data.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_vendor/distlib/t32.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy/lib/_utils_impl.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/PIL/BmpImagePlugin.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pre_commit/resources/ruby-build.tar.gz ∴ /ruby-build/script/update-jruby
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pygments/lexers/idl.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/reflex/components/plotly/plotly.pyi
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pre_commit/clientlib.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/identify/extensions.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/socketio/kafka_manager.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/psutil/tests/test_windows.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/bin/ruff
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/api.json
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/lib/utilsBundleImpl/index.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/PIL/ImageGrab.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/selenium/webdriver/common/windows/selenium-manager.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/plotly/figure_factory/_county_choropleth.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/bin/reinstall_msedge_stable_mac.sh
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy/_core/tests/test_api.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/lib/vite/traceViewer/assets/xtermModule-BeNbaIVa.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/idna/uts46data.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/docutils/parsers/recommonmark_wrapper.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/setuptools/command/bdist_egg.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/httpcore/_sync/init.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/bin/reinstall_msedge_beta_mac.sh
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/bin/reinstall_chrome_stable_mac.sh
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/reflex/custom_components/custom_components.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/fastapi/dependencies/utils.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/httpx/_client.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pydantic/config.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/setuptools/cli-64.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/setuptools/cli-arm64.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/identify/identify.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/socketio/async_redis_manager.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/sockshandler.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/share/jupyter/nbextensions/jupyterlab-plotly/index.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/_plotly_utils/png.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/lib/vite/recorder/assets/index-DVt3E1Ef.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/socketio/zmq_manager.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/numpy/f2py/tests/test_f2py2e.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pandas/core/generic.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/reflex/components/plotly/plotly.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/idna/idnadata.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_internal/exceptions.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/setuptools/gui.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/lib/vite/traceViewer/assets/workbench-D5oSwIMK.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/setuptools/cli-32.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/socketio/redis_manager.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/lib/server/android/android.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_internal/self_outdated_check.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/fastapi/cli.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pydantic_core/_pydantic_core.cpython-312-x86_64-linux-gnu.so
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pandas/io/clipboard/init.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pre_commit/resources/ruby-download.tar.gz ∴ /ruby-download/lib/functions.sh
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_vendor/msgpack/fallback.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/starlette_admin/base.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/psutil/tests/init.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/distlib/t32.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/psutil/_common.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pkg_resources/init.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pip/_vendor/idna/idnadata.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/urllib3/contrib/pyopenssl.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/jupyterlab_plotly/nbextension/index.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/cffi/cparser.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/psutil/_psbsd.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pydantic/v1/env_settings.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/playwright/driver/package/lib/third_party/diff_match_patch.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/starlette_admin/statics/js/vendor/dt.min.js
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/pre_commit/languages/python.py
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/distlib/t64-arm.exe
Changed: /tmp/wolfictl-apk-2952403213/reflex/usr/lib/python3.12/site-packages/coverage/cmdline.py
Moved: reflex/var/lib/db/sbom/reflex-0.6.1-r0.spdx.json -> /tmp/wolfictl-apk-2952403213/reflex/var/lib/db/sbom/reflex-0.6.2-r0.spdx.json (similarity: 0.99)
|
Open AI suggestions to solve the build error: |
malcontent detected files with a risk score equal or higher than 'CRITICAL': Click to expand/collapse/tmp/malcontent836289107/packages/x86_64/reflex-0.6.2-r0.apk/usr/lib/python3.12/site-packages/jaraco/context/init.py [🚨 CRITICAL]
|
|
Tried bumping the two dependencies responsible for the CVEs as follows: poetry add "urllib3=1.26.19"
poetry add "setuptools=70.0.0"But didn't seem to work - that said the build issue is at least resolved |
|
Needs bincapz review by @egibs, then we can send this one for review :) |
|
Here's the finding context: def remove_readonly(func, path, exc_info):
"""
Add support for removing read-only files on Windows.
"""
_, exc, _ = exc_info
if func in (os.rmdir, os.remove, os.unlink) and exc.errno == errno.EACCES:
# change the file to be readable,writable,executable: 0777
os.chmod(path, stat.S_IRWXU | stat.S_IRWXG | stat.S_IRWXO)
# retry
func(path)
else:
raiseSomething to tune for sure. |
<p align="center"> <img src="https://raw.githubusercontent.com/wolfi-dev/.github/b535a42419ce0edb3c144c0edcff55a62b8ec1f8/profile/wolfi-logo-light-mode.svg" /> </p> --------- Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com> Signed-off-by: Mark McCormick <mark.mccormick@chainguard.dev> Co-authored-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com> Co-authored-by: Mark McCormick <mark.mccormick@chainguard.dev>
Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 8c2efec
Package update, as well as removes some --version binary tests, for a script which was removed on v0.6.2.