mirror of
https://github.com/vanhoefm/fragattacks.git
synced 2024-11-25 00:38:24 -05:00
93441c3e45
The py dependency in requirements.txt causes a security warning on GitHub and attracts automated bug hunters (without the hunters verifying the relevancy of the finding). Avoid this. Flaws in py: CVE-2020-29651 Vulnerable versions: < 1.10.0 Patched version: 1.10.0 Description: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality. This fixes #40
17 lines
248 B
Plaintext
17 lines
248 B
Plaintext
attrs==19.3.0
|
|
importlib-metadata==1.5.0
|
|
more-itertools==8.2.0
|
|
mpmath==1.1.0
|
|
packaging==20.1
|
|
pluggy==0.13.1
|
|
py==1.10.0
|
|
pycryptodome==3.9.7
|
|
pyparsing==2.4.6
|
|
pytest==5.3.5
|
|
scapy==2.4.3
|
|
simpy==3.0.11
|
|
six==1.14.0
|
|
sympy==1.5.1
|
|
wcwidth==0.1.8
|
|
zipp==3.0.0
|