CaROS/meta-openembedded
3
1
Fork 0
mirror of git://git.openembedded.org/meta-openembedded synced 2026-01-01 13:58:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

python3-uvicorn: set CVE_PRODUCT

Browse Source 
The default python:uvicorn CPE is not correct, the CVEs are tracked
under encode:uvicorn.

See CVE db query (n8n vendor is not relevant):
sqlite> select * from products where product like 'uvicorn';
CVE-2020-7694|encode|uvicorn|-|||
CVE-2020-7695|encode|uvicorn|||0.11.7|<
CVE-2025-55526|n8n|uvicorn|0.35.0|=||

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Gyorgy Sarvari 2025-12-31 08:54:07 +01:00 committed by Khem Raj
parent cc9af72f13
commit 93fd9b0db0
No known key found for this signature in database
GPG Key ID: BB053355919D3314
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
meta-python/recipes-devtools/python/python3-uvicorn_0.40.0.bb
View File

@ -11,6 +11,7 @@ SRC_URI += "file://0001-ptest-disable-failing-tests.patch"
inherit pypi python_hatchling ptest-python-pytest
PYPI_PACKAGE = "uvicorn"
CVE_PRODUCT = "encode:uvicorn"
RDEPENDS:${PN} = "\
python3-click \