Skip to content

fix(deps): update PyPI/flask from 1.0.2 → 3.1.0 - #16

Open
deepsource-io[bot] wants to merge 1 commit into
masterfrom
deepsource-sca-5bd89777
Open

fix(deps): update PyPI/flask from 1.0.2 → 3.1.0#16
deepsource-io[bot] wants to merge 1 commit into
masterfrom
deepsource-sca-5bd89777

Conversation

@deepsource-io

@deepsource-io deepsource-io Bot commented Mar 27, 2025

Copy link
Copy Markdown
Contributor

This pull request addresses security vulnerabilities in this repository by updating dependencies to a safe version. We recommend manually auditing the package manifest files to verify the fixes.

Upgrade Summary

flask: 1.0.2 → 3.1.0


🤖 This pull request was automatically generated by DeepSource SCA. To view all vulnerabilities in this repository, please visit the dashboard.

fix(deps): update PyPI/flask from 1.0.2 → 3.1.0

This pull request addresses security vulnerabilities in this repository by updating dependencies to a safe version. We recommend manually auditing the package manifest files to verify the fixes.

### Upgrade Summary

**flask**: 1.0.2 → 3.1.0

- Fixes [CVE-2023-30861](https://nvd.nist.gov/vuln/detail/CVE-2023-30861) (High severity)

- References:

  - [https://github.com/pallets/flask/security/advisories/GHSA-m2qf-hxjv-5gpq](https://github.com/pallets/flask/security/advisories/GHSA-m2qf-hxjv-5gpq)

  - [https://nvd.nist.gov/vuln/detail/CVE-2023-30861](https://nvd.nist.gov/vuln/detail/CVE-2023-30861)

  - [https://github.com/pallets/flask/commit/70f906c51ce49c485f1d355703e9cc3386b1cc2b](https://github.com/pallets/flask/commit/70f906c51ce49c485f1d355703e9cc3386b1cc2b)

  - [https://github.com/pallets/flask/commit/afd63b16170b7c047f5758eb910c416511e9c965](https://github.com/pallets/flask/commit/afd63b16170b7c047f5758eb910c416511e9c965)

  - [https://github.com/pallets/flask](https://github.com/pallets/flask)

  - [https://github.com/pallets/flask/releases/tag/2.2.5](https://github.com/pallets/flask/releases/tag/2.2.5)

  - [https://github.com/pallets/flask/releases/tag/2.3.2](https://github.com/pallets/flask/releases/tag/2.3.2)

  - [https://github.com/pypa/advisory-database/tree/main/vulns/flask/PYSEC-2023-62.yaml](https://github.com/pypa/advisory-database/tree/main/vulns/flask/PYSEC-2023-62.yaml)

  - [https://lists.debian.org/debian-lts-announce/2023/08/msg00024.html](https://lists.debian.org/debian-lts-announce/2023/08/msg00024.html)

  - [https://security.netapp.com/advisory/ntap-20230818-0006](https://security.netapp.com/advisory/ntap-20230818-0006)

  - [https://www.debian.org/security/2023/dsa-5442](https://www.debian.org/security/2023/dsa-5442)

---

🤖 This pull request was automatically generated by DeepSource SCA. To view all vulnerabilities in this repository, please visit the [dashboard](https://app.deepsource.com/gh/QuackatronHQ/sca-kitchen-sink/dependencies/).
@deepsource-development

Copy link
Copy Markdown

Here's the code health analysis summary for commits c307653..466c224. View details on DeepSource ↗.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource JavaScript LogoJavaScript✅ SuccessView Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

@deepsource-io

deepsource-io Bot commented Mar 27, 2025

Copy link
Copy Markdown
Contributor Author

Here's the code health analysis summary for commits c307653..466c224. View details on DeepSource ↗.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource JavaScript LogoJavaScript✅ SuccessView Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant