E-commerce-FastAPI

E-commerce-FastAPI copied to clipboard

Bumps [starlette](https://github.com/encode/starlette) from 0.25.0 to 0.27.0. Release notes Sourced from starlette's releases. Version 0.27.0 This release fixes a path traversal vulnerability in StaticFiles. You can view the full security advisory:...

dependabot[bot]

Bumps [redis](https://github.com/redis/redis-py) from 3.5.3 to 4.4.4. Release notes Sourced from redis's releases. 4.4.4 Changes Upgrade urgency: SECURITY, contains fixes to security issues. (CVE-2023-28859) - Cancelling an async future does not,...

dependabot[bot]

Authentication not validating password at all.

1

https://github.com/onionj/E-commerce-FastAPI/blob/a37d591ef2e25310a364403513aac9a1b5582ab1/authentication.py#L66 ``` authentication.py:70: RuntimeWarning: coroutine 'verify_password' was never awaited if user and verify_password(password, user.password): RuntimeWarning: Enable tracemalloc to get the object allocation traceback INFO: 127.0.0.1:46472 - "POST /token HTTP/1.1" 200...

Fa2y