blob: 56944c32cd5f0850355007a467ea4e8a7aa1f4d4 [file] [log] [blame]
aticig7b521f72022-07-15 00:43:09 +03001#######################################################################################
2# Copyright ETSI Contributors and Others.
3#
4# Licensed under the Apache License, Version 2.0 (the "License");
5# you may not use this file except in compliance with the License.
6# You may obtain a copy of the License at
7#
8# http://www.apache.org/licenses/LICENSE-2.0
9#
10# Unless required by applicable law or agreed to in writing, software
11# distributed under the License is distributed on an "AS IS" BASIS,
12# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
13# implied.
14# See the License for the specific language governing permissions and
15# limitations under the License.
16#######################################################################################
17---
18security:
19 - |
20 Fixing following RO security vulnerabilities. Improper Certificate Validation, jinja2 sets autoescape to False,
21 disabling SSL certificate checks, use of unsafe yaml load, try-except-pass detected, use of assert detected.
22