You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I noticed package version and vulnerability ID results getting truncated in the table results when using uv-secure 3.1:
In this case the dependency was Jinja2 version 3.1.4
Checking C:\Users\OwenLamont\Code\OptiGrid-core\uv.lock dependencies for
vulnerabilities...
+---------------------------+
| Vulnerabilities detected!|| Checked: 136 dependencies || Vulnerable: 1 dependency |
+---------------------------+
Vulnerable Dependencies
+-----------------------------------------------------------------------------+
| Package | Ve� | Vulnerability ID | Details ||---------------+-----+-------------------+-----------------------------------|| jinja2 | 3.� | GHSA-q2x7-8rv6-6� | An oversight in how the Jinja ||||| sandboxed environment detects ||||| calls to `str.format` allows an ||||| attacker that controls the ||||| content of a template to execute ||||| arbitrary Python code. |||||||||| To exploit the vulnerability, an ||||| attacker needs to control the ||||| content of a template. Whether ||||| that is the case depends on the |
The IDs can't be copied if truncated and so can't be added to the ignore list without extra research to discover the full ID.
The text was updated successfully, but these errors were encountered:
I noticed package version and vulnerability ID results getting truncated in the table results when using uv-secure 3.1:
In this case the dependency was Jinja2 version 3.1.4
The IDs can't be copied if truncated and so can't be added to the ignore list without extra research to discover the full ID.
The text was updated successfully, but these errors were encountered: