Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remediate High urllib3 vulnerability #409

Open
Lilalamar opened this issue Dec 17, 2019 · 1 comment
Open

Remediate High urllib3 vulnerability #409

Lilalamar opened this issue Dec 17, 2019 · 1 comment
Assignees

Comments

@Lilalamar
Copy link

Snyk reports the following High severity vulnerability in HumanCellAtlas/upload-service. Please remediate by the end of Q1 Milestone 1.

Description

urllib3

Suggested Remediation

Upgrade urllib3 to version 1.24.3 or higher.

Details

urllib3 is an HTTP library with thread-safe connection pooling, file post, and more. Affected versions of this package are vulnerable to CRLF injection. Attacker who has the control of the requesting address parameter, could manipulate an HTTP header and attack an internal service.

@Lilalamar Lilalamar transferred this issue from HumanCellAtlas/ingest-central Dec 17, 2019
@Lilalamar
Copy link
Author

FYI I accidentally created this issue in the ingest-central repo. Moved it to the upload-service repo.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants