Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SNYK Scan finding: CKAN - Improper Handling of Length Parameter Inconsistency #4571

Closed
1 task
btylerburton opened this issue Dec 27, 2023 · 1 comment
Closed
1 task

SNYK Scan finding: CKAN - Improper Handling of Length Parameter Inconsistency #4571

btylerburton opened this issue Dec 27, 2023 · 1 comment
Assignees
@FuhuXia
Labels
bug Software defect or bug compliance Relating to security compliance or documentation
Milestone
March 2024

Comments

@btylerburton
Copy link
Contributor

Please keep any sensitive details in Google Drive.

Date of report: 2023-12-14
Severity: Medium
Due date: 2023-03-14

Due date is based on severity and described in RA-5. 15-days for Critical, 30-days for High, and 90-days for Moderate and lower.

  • Analysis has been performed and an issue has been linked to address other occurrences for this class of vulnerability* (link)

* When a finding is identified, we create two issues. One to address the specific instance identified in the report. The other is to identify and address all other occurrences of this vulnerability within the application.

Brief description

https://security.snyk.io/vuln/SNYK-PYTHON-CKAN-6124881
@btylerburton btylerburton added compliance Relating to security compliance or documentation bug Software defect or bug labels Dec 27, 2023
This was referenced Dec 27, 2023
Closed
Closed
@btylerburton btylerburton added this to the March 2024 milestone Dec 27, 2023
This was referenced Dec 27, 2023
Merged
Merged
@hkdctol hkdctol moved this to 🧊 Icebox in data.gov team board Dec 28, 2023
@FuhuXia FuhuXia mentioned this issue Mar 15, 2024
Closed
1 task
@FuhuXia FuhuXia moved this from 🧊 Icebox to 🏗 In Progress [8] in data.gov team board Mar 21, 2024
@FuhuXia FuhuXia self-assigned this Mar 21, 2024
@FuhuXia
Copy link
Member

FuhuXia commented Mar 21, 2024

it is been worked on in the other tickets

@FuhuXia FuhuXia closed this as completed Mar 21, 2024
@github-project-automation github-project-automation bot moved this from 🏗 In Progress [8] to ✔ Done in data.gov team board Mar 21, 2024
@gujral-rei gujral-rei moved this from ✔ Done to 🗄 Closed in data.gov team board Mar 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@FuhuXia FuhuXia

Labels
bug Software defect or bug compliance Relating to security compliance or documentation
Projects
data.gov team board
Archived in project
Milestone
March 2024
Development

No branches or pull requests
2 participants
@FuhuXia @btylerburton