Missing resolution version for PYSEC-2023-243
Open
Beginner friendly
Nobody has claimed this yet.
- Dominant language
- Shell
- Stars
- 370
- Forks
- 111
- Avg merge
- 3h 52m
- Merged PRs (30d)
- 4
Description
On https://osv.dev/vulnerability/PYSEC-2023-243 newer versions of localstack, e.g., 4.x are reported as vulnerable but according to https://github.com/advisories/GHSA-8633-g3ph-97rp this should not be the case as the issue was resolved.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Compare the OSV page for PYSEC-2023-243 with the linked GitHub advisory, focusing on the resolved versions for localstack. Locate the advisory record for this identifier and update its resolution data so newer 4.x versions are not reported as vulnerable, then verify the generated OSV view reflects the correction.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 68/100