k5924 / k5924

Connect with me:

⚡ General Stats

📚 Learning Stats

♟️ Chess Stats

Type	Rapid ⏲️	Blitz ⚡	Bullet 🔫
Current	285	No Rating	No Rating
Best	296	No Rating	No Rating

White ⚪	Black ⚫	Result 🏆	Date 📅	Position 🗺️	Type 🕕
yttr1x	Karens11	win 🥇	8/12/2022	Link	Rapid
x-9016632113	yttr1x	win 🥇	6/12/2022	Link	Rapid
thienkhang09358	yttr1x	checkmated ❌	3/12/2022	Link	Rapid
yttr1x	theThristywo	checkmated ❌	1/12/2022	Link	Rapid
Spicymayo10	yttr1x	insufficient ⏸️	30/11/2022	Link	Rapid
yttr1x	Hqzeee	win 🥇	30/11/2022	Link	Rapid
bigmode55	yttr1x	checkmated ❌	28/11/2022	Link	Rapid
yttr1x	EliteBestChessPlayer	checkmated ❌	27/11/2022	Link	Rapid

☑️ Todoist Stats

🏆 13,167 Karma Points 🌸 Completed 0 tasks today ✅ Completed 1,594 tasks so far ⏳ Longest streak is 11 days

k5924's Issues

CVE-2021-33503 (High) detected in urllib3-1.25.11-py2.py3-none-any.whl - autoclosed

CVE-2021-33503 - High Severity Vulnerability

Vulnerable Library - urllib3-1.25.11-py2.py3-none-any.whl

HTTP library with thread-safe connection pooling, file post, and more.

Library home page: https://files.pythonhosted.org/packages/56/aa/4ef5aa67a9a62505db124a5cb5262332d1d4153462eb8fd89c9fa41e5d92/urllib3-1.25.11-py2.py3-none-any.whl

Path to dependency file: k5924/api/requirements.txt

Path to vulnerable library: k5924/api/requirements.txt

Dependency Hierarchy:

• requests-2.24.0-py2.py3-none-any.whl (Root Library)
  • ❌ urllib3-1.25.11-py2.py3-none-any.whl (Vulnerable Library)

Found in HEAD commit: 76a83ec765fd4a3e2e034dc3373eebb11a88ae82

Found in base branch: main

Vulnerability Details

An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.

Publish Date: 2021-06-29

URL: CVE-2021-33503

CVSS 3 Score Details (7.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-q2q7-5pp4-w6pg

Release Date: 2021-05-22

Fix Resolution: urllib3 - 1.26.5

---

Step up your Open Source Security Game with WhiteSource here

MonkeyType Badge Action

Hello there, I see you've setup monkeytype-readme but the workflow has been failing: https://github.com/k5924/k5924/actions/workflows/monkeytype.yml.

The error looks like you've not setup monkeytype api key correctly. Someone just had similar problem so I thought you should give it a check. Perhaps you forgot to activate the key in monkeytype settings.

Let me know if you need help. Happy typing, cheers.

test

hi