meta-openembedded/meta-python/recipes-devtools/python/python3-uvicorn_0.40.0.bb
Gyorgy Sarvari 93fd9b0db0
python3-uvicorn: set CVE_PRODUCT
The default python:uvicorn CPE is not correct, the CVEs are tracked
under encode:uvicorn.

See CVE db query (n8n vendor is not relevant):
sqlite> select * from products where product like 'uvicorn';
CVE-2020-7694|encode|uvicorn|-|||
CVE-2020-7695|encode|uvicorn|||0.11.7|<
CVE-2025-55526|n8n|uvicorn|0.35.0|=||

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-31 08:33:59 -08:00

32 lines
823 B
BlitzBasic

SUMMARY = "The lightning-fast ASGI server."
HOMEPAGE = "https://github.com/encode/uvicorn"
LICENSE = "BSD-3-Clause"
LIC_FILES_CHKSUM = "file://LICENSE.md;md5=5c778842f66a649636561c423c0eec2e"
RECIPE_MAINTAINER = "Tom Geelen <t.f.g.geelen@gmail.com>"
SRC_URI[sha256sum] = "839676675e87e73694518b5574fd0f24c9d97b46bea16df7b8c05ea1a51071ea"
SRC_URI += "file://0001-ptest-disable-failing-tests.patch"
inherit pypi python_hatchling ptest-python-pytest
PYPI_PACKAGE = "uvicorn"
CVE_PRODUCT = "encode:uvicorn"
RDEPENDS:${PN} = "\
python3-click \
python3-h11 (>=0.8) \
python3-httptools \
python3-multiprocessing \
python3-python-dotenv \
python3-websockets \
python3-wsproto \
"
RDEPENDS:${PN}-ptest += "\
python3-a2wsgi \
python3-httpx \
python3-pytest-mock \
python3-pyyaml \
"