fix knowing cvw

This commit is contained in:
Jieyab89
2026-07-16 23:07:51 +07:00
parent dbf77fcd12
commit 7c1b600d16
2 changed files with 23 additions and 3 deletions
+20
View File
@@ -3,3 +3,23 @@
You can visit my Gitbook
https://jieyab89-osint.gitbook.io/jieyab89-osint-cheat-sheet-wiki-tips/osint-tool-resouces-usage/all-about-darkweb-tips-darkweb-osint-assessments
# Upgrade libary in pip
Knowing security issue report by Dependabot
> lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files
>
> Link: https://bugs.launchpad.net/lxml/+bug/2146291
> Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
>
> Remarks Upgrade to at least Requests 2.33.0, where the library now extracts files to a non-deterministic location
>
> If developers are unable to upgrade, they can set TMPDIR in their environment to a directory with restricted write access
Upgrade libary with pip
```
pip install -r requirements.txt --upgrade
```
+2 -2
View File
@@ -1,5 +1,5 @@
requests==2.32.5
beautifulsoup4==4.13.5
requests==2.32.5
beautifulsoup4==4.13.5
lxml==6.0.1
lxml>=6.1.0
requests>=2.33.0