Fix example direct vulnerability for Python
When a library is specifically referenced in your setup.py
, requirements.txt
, requirements-dev.txt
, or dev-requirements.txt
, Veracode SCA refers to the library as a direct dependency.
These example steps provide a fix for a Denial of Service (DoS) Memory Consumption vulnerability in feedparser, version 5.1.1 in the example-python repository.
To complete this task:
-
Edit the
requirements.txt
file in the root of the project to match the following:feedparser== 5.1.2