Application family: content-review +------------------------------------------------------------------------------------------+ | ows-blacklist-manager | +------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------+--------------+-----------------+------------------+----------+--------+ | requirements.txt | sqlparse | 0.4.4 | 0.5.0 | HIGH | No | | requirements.txt | werkzeug | 3.0.1 | 3.0.3 | HIGH | No | | requirements.txt | pymysql | 1.1.0 | 1.1.1 | CRITICAL | No | | requirements.txt | idna | 3.6 | 3.7 | MODERATE | No | | requirements.txt | jinja2 | 3.1.3 | 3.1.4 | MODERATE | No | +------------------+--------------+-----------------+------------------+----------+--------+ Application family: content-review +-----------------------------------------------------------------------------------+ | frontend-content | +-----------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +-----------+--------------+-----------------+------------------+----------+--------+ | yarn.lock | got | 9.6.0 | 11.8.5 | MODERATE | No | +-----------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +---------------------------------------------------------------------------------------+ | frontend-royalties | +-----------+------------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +-----------+------------------+-----------------+------------------+----------+--------+ | yarn.lock | parse-path | 4.0.4 | 5.0.0 | HIGH | No | | yarn.lock | moment | 2.29.3 | 2.29.4 | HIGH | No | | yarn.lock | qs | 6.9.3 | 6.9.7 | HIGH | No | | yarn.lock | parse-url | 6.0.5 | 8.1.0 | CRITICAL | No | | yarn.lock | got | 9.6.0 | 11.8.5 | MODERATE | No | | yarn.lock | xml2js | 0.4.19 | 0.5.0 | MODERATE | No | | yarn.lock | tough-cookie | 4.0.0 | 4.1.3 | MODERATE | No | | yarn.lock | semver | 6.3.1 | 7.5.2 | MODERATE | No | | yarn.lock | word-wrap | 1.2.3 | 1.2.4 | MODERATE | No | | yarn.lock | follow-redirects | 1.14.8 | 1.15.6 | MODERATE | No | +-----------+------------------+-----------------+------------------+----------+--------+ Application family: accounting +------------------------------------------------------------------------------------------------------------+ | ows-royalties | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | requirements.txt | cryptography | 3.4.8 | 42.0.2 | MODERATE | No | | requirements.txt | werkzeug | 1.0.1 | 3.0.3 | HIGH | No | | requirements.txt | sentry-sdk | 0.20.3 | 1.14.0 | HIGH | No | | requirements.txt | flask | 1.1.4 | 2.2.5 | HIGH | No | | requirements.txt | pymysql | 1.1.0 | 1.1.1 | CRITICAL | No | | tests/integration/requirements.txt | requests | 2.28.2 | 2.31.0 | MODERATE | No | | requirements.txt | urllib3 | 1.26.17 | 1.26.18 | MODERATE | No | | requirements.txt | jinja2 | 2.11.3 | 3.1.4 | MODERATE | No | | requirements.txt | idna | 3.4 | 3.7 | MODERATE | No | +------------------------------------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +-------------------------------------------------------------------------------------------------------------+ | ows-royalties-workflows | +------------------+---------------------------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------+---------------------------------+-----------------+------------------+----------+--------+ | requirements.txt | apache-airflow | 2.2.2 | 2.5.1 | CRITICAL | No | | requirements.txt | pyjwt | 1.7.1 | 2.4.0 | HIGH | No | | requirements.txt | mako | 1.1.5 | 1.2.2 | HIGH | No | | requirements.txt | cryptography | 3.4.8 | 39.0.1 | HIGH | No | | requirements.txt | werkzeug | 1.0.1 | 2.2.3 | HIGH | No | | requirements.txt | apache-airflow-providers-amazon | 2.4.0 | 7.2.1 | HIGH | No | | requirements.txt | httpx | 0.19.0 | 0.23.0 | CRITICAL | No | | requirements.txt | flask-appbuilder | 3.3.4 | 4.1.3 | LOW | No | | requirements.txt | numpy | 1.20.3 | 1.22 | MODERATE | No | | requirements.txt | certifi | 2020.12.5 | 2022.12.07 | MODERATE | No | +------------------+---------------------------------+-----------------+------------------+----------+--------+ Application family: accounting +------------------------------------------------------------------------------------------------------------+ | ows-payee | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | requirements.txt | cryptography | 3.4.8 | 42.0.2 | MODERATE | No | | requirements.txt | werkzeug | 1.0.1 | 3.0.3 | HIGH | No | | requirements.txt | flask | 1.1.4 | 2.2.5 | HIGH | No | | requirements.txt | pymysql | 0.10.1 | 1.1.1 | CRITICAL | No | | tests/integration/requirements.txt | requests | 2.28.2 | 2.31.0 | MODERATE | No | | requirements.txt | jinja2 | 2.11.3 | 3.1.4 | MODERATE | No | +------------------------------------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +------------------------------------------------------------------------------------------------------------+ | ows-ledger | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | requirements.txt | cryptography | 3.4.8 | 42.0.2 | MODERATE | No | | requirements.txt | werkzeug | 1.0.1 | 3.0.3 | HIGH | No | | requirements.txt | sentry-sdk | 0.20.3 | 1.14.0 | HIGH | No | | requirements.txt | flask | 1.1.4 | 2.2.5 | HIGH | No | | requirements.txt | pymysql | 1.1.0 | 1.1.1 | CRITICAL | No | | tests/integration/requirements.txt | requests | 2.28.2 | 2.31.0 | MODERATE | No | | requirements.txt | jinja2 | 2.11.3 | 3.1.4 | MODERATE | No | | requirements.txt | idna | 3.6 | 3.7 | MODERATE | No | +------------------------------------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +------------------------------------------------------------------------------------------------------------+ | ows-payment | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | requirements.txt | cryptography | 3.4.8 | 42.0.2 | MODERATE | No | | requirements.txt | werkzeug | 1.0.1 | 3.0.3 | HIGH | No | | requirements.txt | sentry-sdk | 0.20.3 | 1.14.0 | HIGH | No | | requirements.txt | flask | 1.1.4 | 2.2.5 | HIGH | No | | requirements.txt | pymysql | 1.1.0 | 1.1.1 | CRITICAL | No | | tests/integration/requirements.txt | requests | 2.28.2 | 2.31.0 | MODERATE | No | | requirements.txt | jinja2 | 2.11.3 | 3.1.4 | MODERATE | No | | requirements.txt | idna | 3.6 | 3.7 | MODERATE | No | +------------------------------------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +------------------------------------------------------------------------------------------------------------+ | ows-abacus-event | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | requirements.txt | cryptography | 3.4.8 | 42.0.2 | MODERATE | No | | requirements.txt | werkzeug | 1.0.1 | 3.0.3 | HIGH | No | | requirements.txt | sentry-sdk | 0.20.3 | 1.14.0 | HIGH | No | | requirements.txt | flask | 1.1.4 | 2.2.5 | HIGH | No | | requirements.txt | pymysql | 0.10.1 | 1.1.1 | CRITICAL | No | | tests/integration/requirements.txt | requests | 2.28.2 | 2.31.0 | MODERATE | No | | requirements.txt | urllib3 | 1.26.16 | 1.26.18 | MODERATE | No | | requirements.txt | jinja2 | 2.11.3 | 3.1.4 | MODERATE | No | | requirements.txt | idna | 3.4 | 3.7 | MODERATE | No | +------------------------------------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +-------------------------------------------------------------------------------------------+ | graphql-abacus | +-----------+----------------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +-----------+----------------------+-----------------+------------------+----------+--------+ | yarn.lock | import-in-the-middle | 1.3.4 | 1.4.2 | HIGH | No | | yarn.lock | @babel/traverse | 7.21.3 | 7.23.2 | CRITICAL | No | | yarn.lock | protobufjs | 7.2.2 | 7.2.5 | CRITICAL | No | | yarn.lock | jsonwebtoken | 8.5.1 | 9.0.0 | MODERATE | No | | yarn.lock | semver | 7.3.8 | 7.5.2 | MODERATE | No | | yarn.lock | word-wrap | 1.2.3 | 1.2.4 | MODERATE | No | | yarn.lock | graphql | 16.6.0 | 16.8.1 | MODERATE | No | | yarn.lock | follow-redirects | 1.15.2 | 1.15.6 | MODERATE | No | | yarn.lock | axios | 0.21.4 | 0.28.0 | MODERATE | No | | yarn.lock | express | 4.18.2 | 4.19.2 | MODERATE | No | | yarn.lock | tar | 6.1.13 | 6.2.1 | MODERATE | No | | yarn.lock | @apollo/server | 4.5.0 | 4.9.3 | LOW | No | | yarn.lock | es5-ext | 0.10.62 | 0.10.63 | LOW | No | +-----------+----------------------+-----------------+------------------+----------+--------+ Application family: accounting +------------------------------------------------------------------------------------------------------------+ | ows-abacus-contract | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | requirements.txt | cryptography | 3.4.8 | 42.0.2 | MODERATE | No | | requirements.txt | werkzeug | 1.0.1 | 3.0.3 | HIGH | No | | requirements.txt | sentry-sdk | 0.20.3 | 1.14.0 | HIGH | No | | requirements.txt | flask | 1.1.4 | 2.2.5 | HIGH | No | | requirements.txt | pymysql | 0.10.1 | 1.1.1 | CRITICAL | No | | tests/integration/requirements.txt | requests | 2.28.2 | 2.31.0 | MODERATE | No | | requirements.txt | jinja2 | 2.11.3 | 3.1.4 | MODERATE | No | | requirements.txt | idna | 3.4 | 3.7 | MODERATE | No | +------------------------------------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +------------------------------------------------------------------------------------------------------------------+ | lambda-abacus | +------------------------------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------------------------------+--------------+-----------------+------------------+----------+--------+ | lambda/commit_royalties/requirements.txt | certifi | 2020.12.5 | 2022.12.07 | MODERATE | No | | lambda/commit_vat/requirements.txt | certifi | 2020.12.5 | 2022.12.07 | MODERATE | No | +------------------------------------------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +------------------------------------------------------------------------------------------------------------+ | ows-abacus-state | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | requirements.txt | cryptography | 3.4.8 | 42.0.2 | MODERATE | No | | requirements.txt | werkzeug | 1.0.1 | 3.0.3 | HIGH | No | | requirements.txt | sentry-sdk | 0.20.3 | 1.14.0 | HIGH | No | | requirements.txt | flask | 1.1.4 | 2.2.5 | HIGH | No | | requirements.txt | pymysql | 0.10.1 | 1.1.1 | CRITICAL | No | | tests/integration/requirements.txt | requests | 2.28.2 | 2.31.0 | MODERATE | No | | requirements.txt | jinja2 | 2.11.3 | 3.1.4 | MODERATE | No | | requirements.txt | idna | 3.6 | 3.7 | MODERATE | No | +------------------------------------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +-----------------------------------------------------------------------------------+ | frontend-moneyhub | +-----------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +-----------+--------------+-----------------+------------------+----------+--------+ | yarn.lock | got | 9.6.0 | 11.8.5 | MODERATE | No | +-----------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +------------------------------------------------------------------------------------------------------------+ | ows-abacus-account | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | requirements.txt | cryptography | 3.4.8 | 42.0.2 | MODERATE | No | | requirements.txt | werkzeug | 1.0.1 | 3.0.3 | HIGH | No | | requirements.txt | sentry-sdk | 0.20.3 | 1.14.0 | HIGH | No | | requirements.txt | flask | 1.1.4 | 2.2.5 | HIGH | No | | requirements.txt | pymysql | 0.10.1 | 1.1.1 | CRITICAL | No | | tests/integration/requirements.txt | requests | 2.28.2 | 2.31.0 | MODERATE | No | | requirements.txt | jinja2 | 2.11.3 | 3.1.4 | MODERATE | No | | requirements.txt | idna | 3.6 | 3.7 | MODERATE | No | +------------------------------------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +------------------------------------------------------------------------------------------------------------+ | ows-abacus-legacy-sync | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | requirements.txt | cryptography | 3.4.8 | 42.0.2 | MODERATE | No | | requirements.txt | werkzeug | 1.0.1 | 3.0.3 | HIGH | No | | requirements.txt | sentry-sdk | 0.20.3 | 1.14.0 | HIGH | No | | requirements.txt | flask | 1.1.4 | 2.2.5 | HIGH | No | | requirements.txt | pymysql | 1.1.0 | 1.1.1 | CRITICAL | No | | tests/integration/requirements.txt | requests | 2.28.2 | 2.31.0 | MODERATE | No | | requirements.txt | urllib3 | 1.26.16 | 1.26.18 | MODERATE | No | | requirements.txt | jinja2 | 2.11.3 | 3.1.4 | MODERATE | No | | requirements.txt | idna | 3.4 | 3.7 | MODERATE | No | +------------------------------------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +------------------------------------------------------------------------------------------+ | dbt-accounting | +------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------+--------------+-----------------+------------------+----------+--------+ | requirements.txt | dbt-core | 1.7.2 | 1.7.13 | HIGH | No | +------------------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +------------------------------------------------------------------------------------------------------------+ | ows-abacus-schedule | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | requirements.txt | cryptography | 3.4.8 | 42.0.2 | MODERATE | No | | requirements.txt | werkzeug | 1.0.1 | 3.0.3 | HIGH | No | | requirements.txt | sentry-sdk | 0.20.3 | 1.14.0 | HIGH | No | | requirements.txt | flask | 1.1.4 | 2.2.5 | HIGH | No | | requirements.txt | pymysql | 1.1.0 | 1.1.1 | CRITICAL | No | | tests/integration/requirements.txt | requests | 2.28.2 | 2.31.0 | MODERATE | No | | requirements.txt | urllib3 | 1.26.16 | 1.26.18 | MODERATE | No | | requirements.txt | jinja2 | 2.11.3 | 3.1.4 | MODERATE | No | | requirements.txt | idna | 3.4 | 3.7 | MODERATE | No | +------------------------------------+--------------+-----------------+------------------+----------+--------+ Application family: accounting +------------------------------------------------------------------------------------------------------------+ | ows-abacus-worksheet | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | File | Package name | Current Version | Required Version | Severity | Fixed? | +------------------------------------+--------------+-----------------+------------------+----------+--------+ | requirements.txt | sentry-sdk | 0.20.3 | 1.14.0 | HIGH | No | | requirements.txt | cryptography | 3.4.8 | 42.0.2 | MODERATE | No | | requirements.txt | werkzeug | 1.0.1 | 3.0.3 | HIGH | No | | requirements.txt | flask | 1.1.4 | 2.2.5 | HIGH | No | | requirements.txt | pymysql | 1.1.0 | 1.1.1 | CRITICAL | No | | tests/integration/requirements.txt | requests | 2.28.2 | 2.31.0 | MODERATE | No | | requirements.txt | jinja2 | 2.11.3 | 3.1.4 | MODERATE | No | | requirements.txt | idna | 3.4 | 3.7 | MODERATE | No | +------------------------------------+--------------+-----------------+------------------+----------+--------+