From ea9fb97f53ae61851c26316275ad89a101d20a93 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Thu, 5 Feb 2026 07:59:50 +0100 Subject: python3-uvicorn: mark CVE-2020-7694 patched Details: https://nvd.nist.gov/vuln/detail/CVE-2020-7694 The vulnerability was reported to the project[1], and the commit[2] that resolved the issue has been part of the project since version 0.11.7. Mark the CVE as patched due to this. [1]: https://github.com/Kludex/uvicorn/issues/723 [2]: https://github.com/Kludex/uvicorn/commit/895807f94ea9a8e588605c12076b7d7517cda503 Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit a5ee234b8cf06b6385a9bf1eb5b60d6171a993c9) Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal --- meta-python/recipes-devtools/python/python3-uvicorn_0.38.0.bb | 1 + 1 file changed, 1 insertion(+) (limited to 'meta-python/recipes-devtools/python') diff --git a/meta-python/recipes-devtools/python/python3-uvicorn_0.38.0.bb b/meta-python/recipes-devtools/python/python3-uvicorn_0.38.0.bb index b0ce49be97..ee295abf5d 100644 --- a/meta-python/recipes-devtools/python/python3-uvicorn_0.38.0.bb +++ b/meta-python/recipes-devtools/python/python3-uvicorn_0.38.0.bb @@ -11,6 +11,7 @@ SRC_URI += "file://0001-ptest-disable-failing-tests.patch" inherit pypi python_hatchling ptest-python-pytest PYPI_PACKAGE = "uvicorn" +CVE_STATUS[CVE-2020-7694] = "fixed-version: The vulnerability has been fixed since 0.11.7" RDEPENDS:${PN} = "\ python3-click \ -- cgit v1.2.3-54-g00ecf