Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check logs Sprint 25.6 Week 1 #5908

Closed
2 tasks done
fec-jli opened this issue Jul 17, 2024 · 1 comment
Closed
2 tasks done

Check logs Sprint 25.6 Week 1 #5908

fec-jli opened this issue Jul 17, 2024 · 1 comment
Assignees
Labels
Security: general General security concern or issue
Milestone

Comments

@fec-jli
Copy link
Contributor

fec-jli commented Jul 17, 2024

Log review needs to be completed per the Security Event Review Checklist (https://github.com/fecgov/FEC/wiki/Security-Event-Review-Checklist)

Ref: #5890

@fec-jli fec-jli added the Security: general General security concern or issue label Jul 17, 2024
@fec-jli fec-jli added this to the 25.6 milestone Jul 19, 2024
@JonellaCulmer JonellaCulmer moved this to 📥 Assigned in Website project Jul 23, 2024
@tmpayton
Copy link
Contributor

Note: The following issues were logged based off snyk cli in addition to snyk dashboard.

FEC-CMS: 5
package.json: 0
requirements.txt: 5
[Snyk Medium - requests@[email protected] Always-Incorrect Control Flow Implementation] (fecgov/fec-cms#6285)
[Snyk Medium - zipp Infinite loop] (fecgov/fec-cms#6367)
[Snyk Medium - [email protected] Improper Removal of Sensitive Information Before Storage or Transfer] -(fecgov/fec-cms#6343)
[Snyk Medium - fix 4 issues: django Denial of Service (DoS,Directory Traversal
,Timing Attack)] -(fecgov/fec-cms#6376)
[Snyk: High - Regular Expression Denial of Service (ReDoS)] -(fecgov/fec-cms#6394)

OpenFEC: 4
package.json: 0
requirements.txt: 4
[Snyk Medium - [email protected] Improper Removal of Sensitive Information Before Storage or Transfer] -(#5877)
[Snyk Medium - Infinite loop] - (#5898)
[Snyk High] - - setuptools Improper Control of Generation of Code ('Code Injection')(#5907)
[Snyk: Medium - Insufficient Verification of Data Authenticity] -(#5914)

Pattern-Library: 0

Search logs:
"User changes" found in the past week for [email protected] with corresponding ticket.
Deployer accounts from cloud.gov dashboard: 10

@github-project-automation github-project-automation bot moved this from 📥 Assigned to ✅ Done in Website project Jul 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Security: general General security concern or issue
Projects
Status: ✅ Done
Development

No branches or pull requests

2 participants