Sulkta-OSS/adacam-api
3
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

audit follow-ups: deps floor, LICENSE, gate /debug/redis-keys

Browse source 
- requirements.txt: bump floors past known CVEs (flask>=2.3.2 fixes
  CVE-2023-30861, requests>=2.32.0 fixes CVE-2023-32681 + CVE-2024-35195,
  redis>=5.0 fixes CVE-2023-28858/9).
- LICENSE: add MIT text (README claimed MIT but the file was missing).
- /api/1/debug/redis-keys: require auth. Was unauthenticated info-disclosure
  on the LAN/AP side.
This commit is contained in:
Sulkta 2026-05-27 09:22:12 -07:00
parent 2f0d39baef
commit e0b6fa0baa
3 changed files with 25 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
requirements.txt
View file

@ -1,3 +1,3 @@
flask>=2.0
redis>=4.0
requests>=2.25
flask>=2.3.2
redis>=5.0
requests>=2.32.0