From 7c1b600d16df37cf35b9e647f440b94d95fdae85 Mon Sep 17 00:00:00 2001 From: Jieyab89 Date: Thu, 16 Jul 2026 23:07:51 +0700 Subject: [PATCH] fix knowing cvw --- Script/Darkweb-Scrapping/Readme.md | 22 +++++++++++++++++++++- Script/Darkweb-Scrapping/requirements.txt | 4 ++-- 2 files changed, 23 insertions(+), 3 deletions(-) diff --git a/Script/Darkweb-Scrapping/Readme.md b/Script/Darkweb-Scrapping/Readme.md index d904fe2..2577443 100644 --- a/Script/Darkweb-Scrapping/Readme.md +++ b/Script/Darkweb-Scrapping/Readme.md @@ -2,4 +2,24 @@ You can visit my Gitbook -https://jieyab89-osint.gitbook.io/jieyab89-osint-cheat-sheet-wiki-tips/osint-tool-resouces-usage/all-about-darkweb-tips-darkweb-osint-assessments \ No newline at end of file +https://jieyab89-osint.gitbook.io/jieyab89-osint-cheat-sheet-wiki-tips/osint-tool-resouces-usage/all-about-darkweb-tips-darkweb-osint-assessments + +# Upgrade libary in pip + +Knowing security issue report by Dependabot + +> lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files +> +> Link: https://bugs.launchpad.net/lxml/+bug/2146291 + +> Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function +> +> Remarks Upgrade to at least Requests 2.33.0, where the library now extracts files to a non-deterministic location +> +> If developers are unable to upgrade, they can set TMPDIR in their environment to a directory with restricted write access + +Upgrade libary with pip + +``` +pip install -r requirements.txt --upgrade +``` \ No newline at end of file diff --git a/Script/Darkweb-Scrapping/requirements.txt b/Script/Darkweb-Scrapping/requirements.txt index 117291b..c4b7b51 100644 --- a/Script/Darkweb-Scrapping/requirements.txt +++ b/Script/Darkweb-Scrapping/requirements.txt @@ -1,5 +1,5 @@ -requests==2.32.5 beautifulsoup4==4.13.5 requests==2.32.5 beautifulsoup4==4.13.5 -lxml==6.0.1 \ No newline at end of file +lxml>=6.1.0 +requests>=2.33.0 \ No newline at end of file