kitos 4e378540af fix(security): replace python-jose with PyJWT to eliminate ecdsa CVEs ...

Snyk scan found 3 High severity vulns: two in ecdsa (pulled by python-jose)
and one in diskcache (pulled by pySigma, never imported). Remove both
vulnerable dependencies and migrate JWT handling to PyJWT. Fix
test_logout_revokes_token which broke because test stubs sys.modules[jose]
with a MagicMock at collection time; test now uses PyJWT directly.

2026-06-11 09:06:16 +02:00

..

alembic

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

app

fix(security): replace python-jose with PyJWT to eliminate ecdsa CVEs

2026-06-11 09:06:16 +02:00

tests

fix(security): replace python-jose with PyJWT to eliminate ecdsa CVEs

2026-06-11 09:06:16 +02:00

.dockerignore

fix: add .dockerignore files to exclude node_modules from build

2026-02-06 16:59:50 +01:00

alembic.ini

feat: Phase 0 - Infrastructure and scaffolding (T-001 to T-003)

2026-02-06 11:28:30 +01:00

Dockerfile

fix: resolve 20 security vulnerabilities from comprehensive audit

2026-02-11 08:56:26 +01:00

entrypoint.prod.sh

feat: production deployment setup and hardcoded URL fixes

2026-02-10 16:04:16 +01:00

entrypoint.sh

fix: D3FEND expandable cards, System page cleanup, and multi-source improvements

2026-02-10 13:22:23 +01:00

pytest.ini

feat(phase-32): add automated tests V3 for data sources, scoring, campaigns and snapshots (T-235 to T-237)

2026-02-10 09:07:43 +01:00

requirements.txt

fix(security): replace python-jose with PyJWT to eliminate ecdsa CVEs

2026-06-11 09:06:16 +02:00

ruff.toml

fix(security): replace python-jose with PyJWT to eliminate ecdsa CVEs

2026-06-11 09:06:16 +02:00