Commit 83b9ec5f authored by Pelayo Torres's avatar Pelayo Torres
Browse files

Resolved some security issues

parent 8f1232b8

services/TS29222_CAPIF_API_Invoker_Management_API/requirements.txt

+10 −9
Original line number Original line Diff line number Diff line
@@ -6,19 +6,20 @@ Flask == 3.0.3 
pymongo == 4.7.3

pymongo == 4.7.3

redis ==  4.5.4

redis ==  4.5.4

flask_jwt_extended == 4.6.0

flask_jwt_extended == 4.6.0

cryptography == 42.0.8

cryptography == 43.0.1

rfc3987 == 1.3.8

rfc3987 == 1.3.8

opentelemetry-instrumentation == 0.40b0

opentelemetry-instrumentation == 0.41b0

opentelemetry-instrumentation-flask == 0.40b0

opentelemetry-instrumentation-flask == 0.41b0

opentelemetry-instrumentation-redis == 0.40b0

opentelemetry-instrumentation-redis == 0.41b0

opentelemetry-instrumentation-pymongo == 0.40b0

opentelemetry-instrumentation-pymongo == 0.41b0

opentelemetry-exporter-otlp == 1.19.0

opentelemetry-exporter-otlp == 1.20.0

opentelemetry-exporter-jaeger == 1.19.0

opentelemetry-exporter-jaeger == 1.20.0

fluent == 0.10.0

fluent == 0.10.0

fluent-logger == 0.10.0

fluent-logger == 0.10.0

opentelemetry-api == 1.19.0

opentelemetry-api == 1.20.0

opentelemetry-sdk == 1.19.0

opentelemetry-sdk == 1.20.0

flask_executor == 1.0.0

flask_executor == 1.0.0

Flask-APScheduler == 1.13.1

Flask-APScheduler == 1.13.1

werkzeug == 3.0.6

gunicorn == 22.0.0

gunicorn == 22.0.0

packaging == 24.0
 
packaging == 24.0
 
 No newline at end of file

services/TS29222_CAPIF_Events_API/capif_events/core/notifications.py

+1 −1
Original line number Original line Diff line number Diff line
@@ -67,7 +67,7 @@ class Notifications(): 




    def request_post(self, url, data):

    def request_post(self, url, data):

        headers = {'content-type': 'application/json'}

        headers = {'content-type': 'application/json'}

        return requests.post(url, json={'text': str(data.to_str())}, headers=headers)

        return requests.post(url, json={'text': str(data.to_str())}, headers=headers, timeout=10)

    

    

    async def send_request(self, url, data):

    async def send_request(self, url, data):

        async with aiohttp.ClientSession() as session:

        async with aiohttp.ClientSession() as session:

services/TS29222_CAPIF_Security_API/capif_security/core/notification.py

+1 −1
Original line number Original line Diff line number Diff line
@@ -9,4 +9,4 @@ class Notifications(): 




    def request_post(self, url, data):

    def request_post(self, url, data):

        headers = {'content-type': 'application/json'}

        headers = {'content-type': 'application/json'}

        return requests.post(url, json={'text': str(data.to_str())}, headers=headers)
 
        return requests.post(url, json={'text': str(data.to_str())}, headers=headers, timeout=10)
 
 No newline at end of file
 
 No newline at end of file

services/mock_server/mock_server.py

+1 −1
Original line number Original line Diff line number Diff line
@@ -57,4 +57,4 @@ def requests_list(): 
configure_logging(app)

configure_logging(app)





if __name__ == '__main__':

if __name__ == '__main__':

    app.run(host=os.environ.get("IP",'0.0.0.0'),port=os.environ.get("PORT",9100),debug=True)
 
    app.run(host=os.environ.get("IP",'0.0.0.0'),port=os.environ.get("PORT",9100))

services/register/register_service/core/register_operations.py

+1 −1
Original line number Original line Diff line number Diff line
@@ -73,7 +73,7 @@ class RegisterOperations: 
        try:

        try:





            url = f"https://{self.config["ccf"]["url"]}{self.config["ccf"]["helper_remove_user"]}{uuid}"

            url = f"https://{self.config["ccf"]["url"]}{self.config["ccf"]["helper_remove_user"]}{uuid}"

            requests.delete(url, cert=("certs/superadmin.crt", "certs/superadmin.key"), verify="certs/ca_root.crt")

            requests.delete(url, cert=("certs/superadmin.crt", "certs/superadmin.key"), verify="certs/ca_root.crt", timeout=10)

            

            

            mycol.delete_one({"uuid": uuid})

            mycol.delete_one({"uuid": uuid})

            current_app.logger.debug(f"User with uuid {uuid} removed successfully")

            current_app.logger.debug(f"User with uuid {uuid} removed successfully")