Apply security fixes according dependabot suggestions

ep4sh · Apr 14, 2023 · 06a0832 · 06a0832
1 parent 6e8a5be
commit 06a0832
Show file tree

Hide file tree

Showing 3 changed files with 27 additions and 16 deletions.
diff --git a/README.md b/README.md
@@ -121,7 +121,7 @@ OR
 ```
 flask db stamp head
 flask db migrate
-flas db upgrade
+flask db upgrade
 ```
 
 #### Run app
@@ -140,6 +140,7 @@ There is a way to spin-up development PostgreSQL database in container via docke
 DB credentials are via environment vars - please checl `docker-compose.yml` file.
 ```
 cd docker_misc/db
+sudo chmod 777 pgdata
 docker-compose up -d
 ```
 

diff --git a/autopsy_app/model.py b/autopsy_app/model.py
@@ -10,9 +10,10 @@
 """
 from datetime import datetime
 from flask_migrate import Migrate
-from flask_sqlalchemy import SQLAlchemy, event
+from flask_sqlalchemy import SQLAlchemy
+from sqlalchemy import event
 from flask_login import UserMixin
-from itsdangerous import TimedJSONWebSignatureSerializer as Serializer
+from itsdangerous.url_safe import URLSafeTimedSerializer as Serializer
 from autopsy_app import app, login_manager
 
 db = SQLAlchemy(app)

diff --git a/requirements.txt b/requirements.txt
@@ -1,30 +1,35 @@
-alembic==1.5.7
+alembic==1.10.3
 astroid==2.5.3
 bcrypt==3.2.0
 blinker==1.4
 cachelib==0.5.0
+certifi==2022.12.7
 cffi==1.14.5
-click==7.1.2
+charset-normalizer==3.1.0
+click==8.1.3
 dnspython==2.1.0
+docopt==0.6.2
 email-validator==1.1.2
-Flask==1.1.2
-Flask-Admin==1.5.7
-Flask-Bcrypt==0.7.1
-Flask-Login==0.5.0
+Flask==2.2.3
+Flask-Admin==1.6.1
+Flask-Bcrypt==1.0.1
+Flask-Login==0.6.2
 Flask-Mail==0.9.1
 Flask-Migrate==2.7.0
 Flask-Session==0.4.0
-Flask-SQLAlchemy==2.4.4
-Flask-WTF==0.14.3
+Flask-SQLAlchemy==3.0.3
+Flask-WTF==1.1.1
+greenlet==2.0.2
 idna==3.1
 isort==5.8.0
-itsdangerous==1.1.0
-Jinja2==2.11.3
+itsdangerous==2.1.2
+Jinja2==3.1.2
 lazy-object-proxy==1.6.0
 Mako==1.2.2
-MarkupSafe==1.1.1
+MarkupSafe==2.1.2
 mccabe==0.6.1
 Pillow==9.0.1
+pipreqs==0.4.13
 psycopg2==2.8.6
 pycparser==2.20
 pylint==2.7.4
@@ -34,10 +39,14 @@ pylint-plugin-utils==0.6
 python-dateutil==2.8.1
 python-dotenv==0.16.0
 python-editor==1.0.4
+requests==2.28.2
 six==1.15.0
-SQLAlchemy==1.3.23
+SQLAlchemy==2.0.9
 toml==0.10.2
+typing_extensions==4.5.0
+urllib3==1.26.15
 uWSGI==2.0.20
-Werkzeug==1.0.1
+Werkzeug==2.2.3
 wrapt==1.12.1
 WTForms==2.3.3
+yarg==0.1.9