Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Security upgrade numpy from 1.21.3 to 1.22.2 #7

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Security upgrade numpy from 1.21.3 to 1.22.2 #7

wants to merge 1 commit into from

Conversation

TheRedHatter
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • samples/dnn/dnn_model_runner/dnn_conversion/requirements.txt
⚠️ Warning 
visualdl 2.5.2 has requirement paddle2onnx>=1.0.5, but you have paddle2onnx 0.9.5.
visualdl 2.5.2 has requirement gradio==3.11.0, but you have gradio 3.28.2.
torch 1.13.1 requires nvidia-cuda-nvrtc-cu11, which is not installed.
torch 1.13.1 requires nvidia-cublas-cu11, which is not installed.
torch 1.13.1 requires nvidia-cudnn-cu11, which is not installed.
torch 1.13.1 requires nvidia-cuda-runtime-cu11, which is not installed.
scikit-learn 1.0.2 requires scipy, which is not installed.
paddleseg 2.8.0 requires scipy, which is not installed.
paddleseg 2.8.0 has requirement opencv-python<=4.6.0, but you have opencv-python 4.7.0.72.
paddlepaddle 2.4.2 has requirement protobuf<=3.20.0,>=3.1.0, but you have protobuf 3.20.3.
paddle2onnx 0.9.5 has requirement onnx<=1.9.0, but you have onnx 1.13.1.

Vulnerabilities that will be fixed

By pinning:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity
low severity 506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7		 NULL Pointer Dereference
SNYK-PYTHON-NUMPY-2321964		 numpy:
1.21.3 -> 1.22.2
No Proof of Concept
low severity 399/1000
Why? Has a fix available, CVSS 3.7		 Buffer Overflow
SNYK-PYTHON-NUMPY-2321966		 numpy:
1.21.3 -> 1.22.2
No No Known Exploit
low severity 506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7		 Denial of Service (DoS)
SNYK-PYTHON-NUMPY-2321970		 numpy:
1.21.3 -> 1.22.2
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 NULL Pointer Dereference
🦉 Denial of Service (DoS)

@sonarqubecloud
Copy link

sonarqubecloud bot commented May 4, 2023

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@TheRedHatter
Copy link
Owner Author

Logo
Checkmarx One – Scan Summary & Details – 1010b20e-93c8-4b10-a441-2f0482d65004

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Buffer_Improper_Index_Access /modules/video/src/ecc.cpp: 304 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/video/src/ecc.cpp: 303 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/video/src/ecc.cpp: 294 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/video/src/ecc.cpp: 284 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/test/test_thresh.cpp: 461 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/test/test_color.cpp: 1633 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/resize.cpp: 1190 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/phasecorr.cpp: 333 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/phasecorr.cpp: 267 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/phasecorr.cpp: 249 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/phasecorr.cpp: 150 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/phasecorr.cpp: 135 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/imgwarp.cpp: 2143 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/filter.simd.hpp: 260 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 1669 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 1095 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 950 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 945 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 940 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 939 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 812 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/demosaicing.cpp: 811 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2136 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2127 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2123 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 2021 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1929 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1920 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1914 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1909 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1909 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1905 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1885 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1881 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1876 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1872 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1668 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1639 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1628 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1624 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1604 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1600 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1595 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1591 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 1591 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 187 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 184 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 183 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 162 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 161 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 160 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 159 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 158 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 156 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 155 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 153 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 152 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 139 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 138 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 137 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 136 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 128 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 127 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 126 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 125 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 115 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 114 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 113 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 112 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/connectedcomponents.cpp: 111 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/canny.cpp: 639 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/imgproc/src/segmentation.cpp: 220 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/features2d/src/kaze/nldiffusion_functions.cpp: 480 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/features2d/src/kaze/nldiffusion_functions.cpp: 404 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/features2d/src/kaze/AKAZEFeatures.cpp: 206 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/net_impl.cpp: 1468 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/layers/pooling_layer.cpp: 1059 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/layers/fast_convolution/fast_convolution.cpp: 254 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/layers/fast_convolution/depthwise_convolution.cpp: 64 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/int8layers/pooling_layer.cpp: 459 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/int8layers/eltwise_layer.cpp: 561 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/dnn/src/int8layers/eltwise_layer.cpp: 554 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/core/src/matrix_decomp.cpp: 120 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/core/src/dxt.cpp: 1537 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/stereosgbm.cpp: 1092 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/stereosgbm.cpp: 1047 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/stereobm.cpp: 874 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/ptsetreg.cpp: 661 Attack Vector
HIGH Buffer_Improper_Index_Access /modules/calib3d/src/calibinit.cpp: 1009 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libtiff/tif_predict.c: 581 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libtiff/tif_predict.c: 364 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libspng/spng.c: 523 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libpng/pngrtran.c: 803 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libpng/png.c: 4106 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjpeg/jdmainct.c: 191 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjpeg/jdcolor.c: 262 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjpeg-turbo/src/jctrans.c: 399 Attack Vector
HIGH Buffer_Improper_Index_Access /3rdparty/libjpeg-turbo/src/jchuff.c: 640

More results are available on AST platform

@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@TheRedHatter @snyk-bot