geekcomputers / geekcomputers/Python
Multiple Vulnerabilities in PDF
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 35.4k
- Forks
- 12.9k
- Avg merge
- 2h 37m
- Merged PRs (30d)
- 1
Description
I have spotted a handful of security issues due to a outdated library in PDF, the library is pillow and it is set to be on 5.0 instead of the latest version (At the time of writing this that would be 8.4.0). To fix this issue all you have to do is go in the requirments.txt file and change
Pillow==5.0.0
fpdf==1.7.2
to
Pillow==8.4.0
fpdf==1.7.2
I would recommend fixing this as soon as possible.
P.S. The pull request #1424 that I made has the fix in it so yeah
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Review requirements.txt and the existing pull request #1424, which contains the proposed dependency update. Confirm that Pillow is changed from 5.0.0 to 8.4.0 while fpdf remains at 1.7.2, then verify the dependency file reflects the intended versions.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Bug
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 25/100