Skip to content

fix(5948): resolve critical security vulnerabilities in Python test report generator#159

Merged
OMpawar-21 merged 1 commit intodevelopmentfrom
fix/DX-5948
Apr 22, 2026
Merged

fix(5948): resolve critical security vulnerabilities in Python test report generator#159
OMpawar-21 merged 1 commit intodevelopmentfrom
fix/DX-5948

Conversation

@OMpawar-21
Copy link
Copy Markdown
Contributor

No description provided.

- Add defusedxml for secure XML parsing (prevents XXE attacks)
- Enhance path traversal prevention with comprehensive validation
- Add input sanitization for all file paths
- Block null byte injection and symbolic link attacks
- Add security documentation and requirements.txt
Fixes: Insecure XML Parser (405), Path Traversal (403), XPath Injection (403)
@OMpawar-21 OMpawar-21 requested a review from a team as a code owner April 22, 2026 09:56
@github-actions
Copy link
Copy Markdown

We regret to inform you that you are currently not able to merge your changes into the master branch due to restrictions applied by our SRE team. To proceed with merging your changes, we kindly request that you create a pull request from the next branch. Our team will then review the changes and work with you to ensure a successful merge into the master branch.

@github-actions
Copy link
Copy Markdown

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 0 25 ✅ Passed
🟡 Medium Severity 0 0 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 0 30 / 120 days ✅ Passed
🟡 Medium 0 0 90 / 365 days ✅ Passed
🔵 Low 0 0 180 / 365 days ✅ Passed

✅ BUILD PASSED - All security checks passed

@cs-raj cs-raj changed the base branch from main to development April 22, 2026 10:07
@OMpawar-21 OMpawar-21 merged commit ce78c33 into development Apr 22, 2026
9 of 10 checks passed
@OMpawar-21 OMpawar-21 deleted the fix/DX-5948 branch April 22, 2026 10:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants