py3-pymongo/4.9.1 package update #28845
Conversation
![octo-sts[bot]](https://avatars.githubusercontent.com/in/801323?s=60&v=4){kind=small}
octo-sts
bot
commented
Sep 18, 2024
octo-sts
bot
commented
Signed-off-by: wolfi-bot <[email protected]>
octo-sts
bot
added
request-version-update
Package py3-pymongo: Click to expand/collapsePackage py3-pymongo:
(
"""
# Generated by melange
pkgname = py3-pymongo
- pkgver = 4.8.0-r0
+ pkgver = 4.9.1-r0
arch = x86_64
- size = 1927297
+ size = 2967852
origin = py3-pymongo
pkgdesc = Python driver for MongoDB <http://www.mongodb.org>
url =
- commit = 7ec096001c39c23db63d42963d63091410c1425f
- builddate = 1720117573
+ commit = 5151ee9d98f9c2ccb6c49908025c036d68e646a9
license = Apache-2.0
depend = py3-dnspython
depend = python-3
depend = so:libc.so.6
- datahash = d9fb86bdbe8e5f99f0a68b68055191dcabbd693441daad5861a2316896c25e2c
+ datahash = 6725bcf55cb38634aef18a1f1295220a309778e69808e5bc11803e375e0eaa8e
"""
)
Added: /usr/lib/python3.12/site-packages/gridfs/asynchronous/grid_file.py bincapz found differences: Click to expand/collapseDeleted: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/auth_aws.py [🔥 HIGH]
Deleted: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/network.py [✅ LOW]
Deleted: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/monitor.py [
|
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | ref/words/heartbeat | references a 'heartbeat' | enabled_for_server_heartbeat heartbeat protoco heartbeat_frequen publish_server_heartbeat_failed publish_server_heartbeat_started publish_server_heartbeat_succeed records must be rescanned every heartbeatFrequenc |
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Deleted: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/periodic_executor.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | process/multithreaded | uses python threading | threading.Thread |
| -MEDIUM | ref/daemon | Run as a background daemon | daemon |
| -LOW | ref/site/url | contains embedded HTTPS URLs | python/cpython#114570 |
Deleted: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/settings.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | ref/words/heartbeat | references a 'heartbeat' | _heartbeat_frequen def heartbeat_frequen heartbeatFrequenc if heartbeat_frequen |
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Deleted: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/aggregation.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Deleted: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/bulk.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Deleted: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/helpers.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://docs.python.org/3.4/library/sys.html https://mypy.readthedocs.io/en/stable/generics.html? |
Deleted: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/topology.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | ref/words/heartbeat | references a 'heartbeat' | Clear the pool from a failed heartbeat |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://pymongo.readthedocs.io/en/stable/faq.html |
Deleted: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/server.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | process/create | create child process | fork |
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/auth_oidc.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/socket/connect | initiate a connection on a socket | connect |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/pool.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | system platform identification | sys.platform |
| +MEDIUM | net/socket/connect | initiate a connection on a socket | .connect( socket.socket |
| +MEDIUM | process/multiprocess | uses python multiprocessing | multiprocessing |
| +MEDIUM | ref/words/heartbeat | references a 'heartbeat' | assert heartbeat_frequen |
| +LOW | net/hostport/parse | Network address and service translation | getaddrinfo |
| +LOW | net/socket/receive | receive a message to a socket | recv socket |
| +LOW | net/socket/send | send a message to a socket | _send |
| +LOW | ref/site/url | contains embedded HTTPS URLs | eventlet/eventlet#692 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/database_shared.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/settings.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/words/heartbeat | references a 'heartbeat' | _heartbeat_frequen def heartbeat_frequen heartbeatFrequenc if heartbeat_frequen |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/server.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | process/create | create child process | fork |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/network.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | net/socket/receive | receive a message to a socket | recv socket |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/server.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | process/create | create child process | fork |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/auth_oidc_shared.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | fd/read | reads from a file handle | fid.read() |
| +LOW | net/url | Handles URL strings | urllib |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/network.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | net/socket/receive | receive a message to a socket | recv socket |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/bulk.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/auth.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | 3P/threat_hunting/impacket | references 'impacket' tool, by mthcht | /krb5/krb5/blob/d406afa363554097ac48646a29249c04f498c88e/src/util/k5test.py |
| +MEDIUM | evasion/base64/decode | decode base64 strings | b64decode::$b64decode |
| +MEDIUM | ref/site/download | http dropper url | https://github.com/krb5/krb5/blob/d406afa363554097ac48646a29249c04f498c88e/src/util/k5test.py |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | net/hostport/parse | Network address and service translation | getaddrinfo |
| +LOW | net/url | Handles URL strings | urllib |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/krb5/krb5/blob/d406afa363554097ac48646a29249c04f498c88 |
| +LOW | ref/words/password | references a 'password' | def _password_digest if password is not None password can |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/topology.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/words/heartbeat | references a 'heartbeat' | Clear the pool from a failed heartbeat |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://www.mongodb.com/docs/languages/ |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/helpers.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://docs.python.org/3/library/functions.html https://mypy.readthedocs.io/en/stable/generics.html? |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/aggregation.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/collection.py [✅ LOW]
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/client_session.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | net/socket/listen | listen on a socket | accept socket |
| +LOW | net/socket/send | send a message to a socket | send socket |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://dochub.mongodb.org/core/causal-consistency https://dochub.mongodb.org/core/transactions |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/encryption.py [🔥 HIGH]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +HIGH | admin/pip_install | Installs software using pip from python | pip install --upgrade 'pymongo |
| +MEDIUM | ref/daemon | Run as a background daemon | _spawn_daemon |
| +LOW | crypto/aes | Supports AES (Advanced Encryption Standard) | AES |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | net/oauth2 | supports OAuth2 | oauth2 |
| +LOW | net/socket/receive | receive a message to a socket | recv socket |
| +LOW | net/socket/send | send a message to a socket | send socket |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://mongodb.com/docs/manual/reference/command/create |
| +LOW | secrets/private_key | References private keys | privateKey |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/mongo_client.py [⚠️ MEDIUM]
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/mongo_client.py [⚠️ MEDIUM]
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/auth.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | 3P/threat_hunting/impacket | references 'impacket' tool, by mthcht | /krb5/krb5/blob/d406afa363554097ac48646a29249c04f498c88e/src/util/k5test.py |
| +MEDIUM | evasion/base64/decode | decode base64 strings | b64decode::$b64decode |
| +MEDIUM | ref/site/download | http dropper url | https://github.com/krb5/krb5/blob/d406afa363554097ac48646a29249c04f498c88e/src/util/k5test.py |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | net/hostport/parse | Network address and service translation | getaddrinfo |
| +LOW | net/url | Handles URL strings | urllib |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/krb5/krb5/blob/d406afa363554097ac48646a29249c04f498c88 |
| +LOW | ref/words/password | references a 'password' | def _password_digest if password is not None password can |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/bulk.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/monitor.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/words/heartbeat | references a 'heartbeat' | enabled_for_server_heartbeat heartbeat protoco heartbeat_frequen publish_server_heartbeat_failed publish_server_heartbeat_started publish_server_heartbeat_succeed records must be rescanned every heartbeatFrequenc |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/periodic_executor.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | system platform identification | sys.platform |
| +MEDIUM | process/multithreaded | uses python threading | threading.Thread |
| +MEDIUM | ref/daemon | Run as a background daemon | daemon |
| +LOW | ref/site/url | contains embedded HTTPS URLs | python/cpython#114570 python/cpython#122240 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/collection.py [✅ LOW]
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/database.py [✅ LOW]
Added: py3-pymongo/usr/lib/python3.12/site-packages/gridfs/asynchronous/grid_file.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/upload | uploads files | UPLOAD_BUFFER_CHUNKS UPLOAD_BUFFER_SIZE Uploads uploadDate upload_date upload_from_stream_wit upload_stream_with_id uploaded uploads |
| +LOW | fd/read | reads from a file handle | file.read() grid_data.read() grid_out.read() |
| +LOW | fd/write | writes to a file handle | _buffer.write(to_write) destination.write(chunk) f.write(data) gin.write(source) grid_file.write(data) self.write(line) |
| +LOW | hash/md5 | Uses the MD5 signature format | md5: |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://dochub.mongodb.org/core/cursors https://dochub.mongodb.org/core/find https://dochub.mongodb.org/core/gridfs https://docs.python.org/3/library/io.html |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/_client_bulk_shared.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/topology.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/words/heartbeat | references a 'heartbeat' | Clear the pool from a failed heartbeat |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://www.mongodb.com/docs/languages/ |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/bulk_shared.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/command_cursor.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | net/socket/send | send a message to a socket | _send |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://dochub.mongodb.org/core/cursors |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/client_bulk.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/auth_aws.py [🔥 HIGH]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +HIGH | admin/pip_install | Installs software using pip from python | pip install 'pymongo |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| +LOW | ref/words/password | references a 'password' | password |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/encryption.py [🔥 HIGH]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +HIGH | admin/pip_install | Installs software using pip from python | pip install --upgrade 'pymongo |
| +MEDIUM | ref/daemon | Run as a background daemon | _spawn_daemon |
| +LOW | crypto/aes | Supports AES (Advanced Encryption Standard) | AES |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | net/oauth2 | supports OAuth2 | oauth2 |
| +LOW | net/socket/receive | receive a message to a socket | recv socket |
| +LOW | net/socket/send | send a message to a socket | send socket |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://mongodb.com/docs/manual/reference/command/create |
| +LOW | secrets/private_key | References private keys | privateKey |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/auth_oidc.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/socket/connect | initiate a connection on a socket | connect |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/auth_shared.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| +LOW | ref/words/password | references a 'password' | A password is required |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/pool.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | system platform identification | sys.platform |
| +MEDIUM | net/socket/connect | initiate a connection on a socket | .connect( socket.socket |
| +MEDIUM | process/multiprocess | uses python multiprocessing | multiprocessing |
| +MEDIUM | ref/words/heartbeat | references a 'heartbeat' | assert heartbeat_frequen |
| +LOW | net/hostport/parse | Network address and service translation | getaddrinfo |
| +LOW | net/socket/receive | receive a message to a socket | recv socket |
| +LOW | net/socket/send | send a message to a socket | _send |
| +LOW | ref/site/url | contains embedded HTTPS URLs | eventlet/eventlet#692 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/gridfs/synchronous/grid_file.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/upload | uploads files | UPLOAD_BUFFER_CHUNKS UPLOAD_BUFFER_SIZE Uploads uploadDate upload_date upload_from_stream_wit upload_stream_with_id uploaded uploads |
| +LOW | fd/read | reads from a file handle | file.read() grid_data.read() grid_out.read() |
| +LOW | fd/write | writes to a file handle | _buffer.write(to_write) destination.write(chunk) f.write(data) gin.write(source) grid_file.write(data) self.write(line) |
| +LOW | hash/md5 | Uses the MD5 signature format | md5: |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://dochub.mongodb.org/core/cursors https://dochub.mongodb.org/core/find https://dochub.mongodb.org/core/gridfs https://docs.python.org/3/library/io.html |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/change_stream.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://mongodb.com/docs/manual/changeStreams/ |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/helpers_shared.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://docs.python.org/3.4/library/sys.html |
Added: py3-pymongo/usr/lib/python3.12/site-packages/gridfs/grid_file_shared.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/upload | uploads files | UPLOAD_BUFFER_CHUNKS UPLOAD_BUFFER_SIZE uploadDate |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/database.py [✅ LOW]
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/periodic_executor.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | system platform identification | sys.platform |
| +MEDIUM | process/multithreaded | uses python threading | threading.Thread |
| +MEDIUM | ref/daemon | Run as a background daemon | daemon |
| +LOW | ref/site/url | contains embedded HTTPS URLs | python/cpython#114570 python/cpython#122240 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/settings.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/words/heartbeat | references a 'heartbeat' | _heartbeat_frequen def heartbeat_frequen heartbeatFrequenc if heartbeat_frequen |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/cursor.py [✅ LOW]
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/pool_options.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | exec/shell_command | execute a shell command | system |
| +MEDIUM | kernel/platform | system platform identification | sys.platform |
| +MEDIUM | net/socket/connect | initiate a connection on a socket | _connect |
| +LOW | net/hostport/parse | Network address and service translation | getaddrinfo |
| +LOW | net/socket/send | send a message to a socket | send socket |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/mongodb/specifications/blob/5112bcc/source/mongodb-han |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/command_cursor.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | net/socket/send | send a message to a socket | _send |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://dochub.mongodb.org/core/cursors |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/cursor.py [✅ LOW]
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/monitor.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/words/heartbeat | references a 'heartbeat' | enabled_for_server_heartbeat heartbeat protoco heartbeat_frequen publish_server_heartbeat_failed publish_server_heartbeat_started publish_server_heartbeat_succeed records must be rescanned every heartbeatFrequenc |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/cursor_shared.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/helpers.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://docs.python.org/3/library/functions.html https://mypy.readthedocs.io/en/stable/generics.html? |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/client_bulk.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/network_layer.py [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | system platform identification | sys.platform |
| +LOW | net/socket/send | send a message to a socket | send socket |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://docs.python.org/3/library/asyncio-platforms.html |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/aggregation.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/synchronous/client_session.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | net/socket/listen | listen on a socket | accept socket |
| +LOW | net/socket/send | send a message to a socket | send socket |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://dochub.mongodb.org/core/causal-consistency https://dochub.mongodb.org/core/transactions |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/auth_aws.py [🔥 HIGH]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +HIGH | admin/pip_install | Installs software using pip from python | pip install 'pymongo |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| +LOW | ref/words/password | references a 'password' | password |
Added: py3-pymongo/usr/lib/python3.12/site-packages/pymongo/asynchronous/change_stream.py [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://mongodb.com/docs/manual/changeStreams/ |
Changed: /tmp/wolfictl-apk-3972880294/py3-pymongo/usr/lib/python3.12/site-packages/pymongo/encryption_options.py
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | evasion/lib_alias | aliases core python library to an alternate name | from pymongocrypt import synchronous as _ |
Changed: /tmp/wolfictl-apk-3972880294/py3-pymongo/usr/lib/python3.12/site-packages/pymongo/uri_parser.py
Changed: /tmp/wolfictl-apk-3972880294/py3-pymongo/usr/lib/python3.12/site-packages/pymongo/encryption.py [🔥 HIGH → ✅ LOW]
8 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -HIGH | admin/pip_install | Installs software using pip from python | pip install 'pymongo |
| -MEDIUM | ref/daemon | Run as a background daemon | _spawn_daemon |
| -LOW | crypto/aes | Supports AES (Advanced Encryption Standard) | AES |
| -LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| -LOW | net/oauth2 | supports OAuth2 | oauth2 |
| -LOW | net/socket/receive | receive a message to a socket | recv socket |
| -LOW | net/socket/send | send a message to a socket | send socket |
| -LOW | secrets/private_key | References private keys | privateKey |
Moved: py3-pymongo/var/lib/db/sbom/py3-pymongo-4.8.0-r0.spdx.json -> /tmp/wolfictl-apk-3972880294/py3-pymongo/var/lib/db/sbom/py3-pymongo-4.9.1-r0.spdx.json (similarity: 0.98)
debasishbsws
deleted the
wolfictl-63be8090-73d8-4cd8-a7fd-eeb6f1716cc2
branch
