diff --git a/techstack.md b/techstack.md new file mode 100644 index 0000000..d74b0d3 --- /dev/null +++ b/techstack.md @@ -0,0 +1,98 @@ + +
+ +# Tech Stack File +![](https://img.stackshare.io/repo.svg "repo") [yourkin/fastapi_simple_security](https://github.com/yourkin/fastapi_simple_security)![](https://img.stackshare.io/public_badge.svg "public") +

+|7
Tools used|02/29/24
Report generated| +|------|------| +
+ +## Languages (1) + + + + +
+ Python +
+ Python +
+ +
+ +## DevOps (4) + + + + + + + + + + +
+ Docker +
+ Docker +
+ +
+ Git +
+ Git +
+ +
+ GitHub Actions +
+ GitHub Actions +
+ +
+ PyPI +
+ PyPI +
+ +
+ + +## Open source packages (2) + +## PyPI (2) + +|NAME|VERSION|LAST UPDATED|LAST UPDATED BY|LICENSE|VULNERABILITIES| +|:------|:------|:------|:------|:------|:------| +|[fastapi](https://pypi.org/project/fastapi)|v0.98.0|05/06/22|mrtolkien |MIT|[](https://github.com/advisories/GHSA-qf9m-vfgh-m389) (High)
[CVE-2024-24762](https://github.com/advisories/GHSA-2jv5-9r88-3w3p) (High)| +|[urllib3](https://pypi.org/project/urllib3)|v2.0.3|10/17/22|mrtolkien |MIT|[CVE-2023-45803](https://github.com/advisories/GHSA-g4mx-q9vg-27p4) (Moderate)
[CVE-2023-43804](https://github.com/advisories/GHSA-v845-jxx5-vc9f) (Moderate)| + +
+
+ +Generated via [Stack File](https://github.com/marketplace/stack-file) diff --git a/techstack.yml b/techstack.yml new file mode 100644 index 0000000..7de8aeb --- /dev/null +++ b/techstack.yml @@ -0,0 +1,121 @@ +repo_name: yourkin/fastapi_simple_security +report_id: ee2ecec21b0acdc03b0711ef5fe78ca9 +version: 0.1 +repo_type: Public +timestamp: '2024-02-29T18:17:02+00:00' +requested_by: mrtolkien +provider: github +branch: master +detected_tools_count: 7 +tools: +- name: Python + description: A clear and powerful object-oriented programming language, comparable + to Perl, Ruby, Scheme, or Java. + website_url: https://www.python.org + open_source: true + hosted_saas: false + category: Languages & Frameworks + sub_category: Languages + image_url: https://img.stackshare.io/service/993/pUBY5pVj.png + detection_source_url: https://github.com/yourkin/fastapi_simple_security + detection_source: Repo Metadata +- name: Docker + description: Enterprise Container Platform for High-Velocity Innovation. + website_url: https://www.docker.com/ + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Build, Test, Deploy + sub_category: Virtual Machine Platforms & Containers + image_url: https://img.stackshare.io/service/586/n4u37v9t_400x400.png + detection_source_url: https://github.com/yourkin/fastapi_simple_security + detection_source: Repo Metadata +- name: Git + description: Fast, scalable, distributed revision control system + website_url: http://git-scm.com/ + open_source: true + hosted_saas: false + category: Build, Test, Deploy + sub_category: Version Control System + image_url: https://img.stackshare.io/service/1046/git.png + detection_source_url: https://github.com/yourkin/fastapi_simple_security + detection_source: Repo Metadata +- name: GitHub Actions + description: Automate your workflow from idea to production + website_url: https://github.com/features/actions + open_source: false + hosted_saas: true + category: Build, Test, Deploy + sub_category: Continuous Integration + image_url: https://img.stackshare.io/service/11563/actions.png + detection_source_url: https://github.com/yourkin/fastapi_simple_security/blob/master/.github/workflows/pr_python_tests.yml + detection_source: ".github/workflows/pr_python_tests.yml" + last_updated_by: renovate[bot] + last_updated_on: 2022-11-26 18:06:08.000000000 Z +- name: PyPI + description: A repository of software for the Python programming language + website_url: https://pypi.org/ + open_source: false + hosted_saas: false + category: Build, Test, Deploy + sub_category: Hosted Package Repository + image_url: https://img.stackshare.io/service/12572/-RIWgodF_400x400.jpg + detection_source_url: https://github.com/yourkin/fastapi_simple_security/blob/master/pyproject.toml + detection_source: pyproject.toml + last_updated_by: mrtolkien + last_updated_on: 2021-12-06 07:35:21.000000000 Z +- name: fastapi + description: FastAPI framework + package_url: https://pypi.org/project/fastapi + version: 0.98.0 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20520/default_ded6d17aa418fbd05ff28b85345c77ab878c6b37.png + detection_source_url: https://github.com/yourkin/fastapi_simple_security/blob/master/poetry.lock + detection_source: pyproject.toml + last_updated_by: mrtolkien + last_updated_on: 2022-05-06 08:21:03.000000000 Z + vulnerabilities: + - name: 'Duplicate Advisory: FastAPI Content-Type Header ReDoS' + cve_id: + cve_url: https://github.com/advisories/GHSA-qf9m-vfgh-m389 + detected_date: Feb 6 + severity: high + first_patched: 0.109.1 + - name: python-multipart vulnerable to Content-Type Header ReDoS + cve_id: CVE-2024-24762 + cve_url: https://github.com/advisories/GHSA-2jv5-9r88-3w3p + detected_date: Feb 17 + severity: high + first_patched: 0.109.1 +- name: urllib3 + description: HTTP library with thread-safe connection pooling + package_url: https://pypi.org/project/urllib3 + version: 2.0.3 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19842/default_4604ff5dcb7f4d9c7b3833591c2142493951b19c.png + detection_source_url: https://github.com/yourkin/fastapi_simple_security/blob/master/poetry.lock + detection_source: pyproject.toml + last_updated_by: mrtolkien + last_updated_on: 2022-10-17 23:45:50.000000000 Z + vulnerabilities: + - name: urllib3's request body not stripped after redirect from 303 status changes + request method to GET + cve_id: CVE-2023-45803 + cve_url: https://github.com/advisories/GHSA-g4mx-q9vg-27p4 + detected_date: Oct 18 + severity: moderate + first_patched: 2.0.7 + - name: "`Cookie` HTTP header isn't stripped on cross-origin redirects" + cve_id: CVE-2023-43804 + cve_url: https://github.com/advisories/GHSA-v845-jxx5-vc9f + detected_date: Oct 3 + severity: moderate + first_patched: 2.0.6