diff mbox series

[meta-python,05/34] python3-uvicorn: set CVE_PRODUCT

Message ID 20251231075436.771395-5-skandigraun@gmail.com
State New
Headers show
Series [meta-python,01/34] python3-pandas: set CVE_PRODUCT | expand

Commit Message

Gyorgy Sarvari Dec. 31, 2025, 7:54 a.m. UTC 
The default python:uvicorn CPE is not correct, the CVEs are tracked
under encode:uvicorn.

See CVE db query (n8n vendor is not relevant):
sqlite> select * from products where product like 'uvicorn';
CVE-2020-7694|encode|uvicorn|-|||
CVE-2020-7695|encode|uvicorn|||0.11.7|<
CVE-2025-55526|n8n|uvicorn|0.35.0|=||

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 meta-python/recipes-devtools/python/python3-uvicorn_0.40.0.bb | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-uvicorn_0.40.0.bb b/meta-python/recipes-devtools/python/python3-uvicorn_0.40.0.bb
index 56d58ded0a..3013ff50d0 100644
--- a/meta-python/recipes-devtools/python/python3-uvicorn_0.40.0.bb
+++ b/meta-python/recipes-devtools/python/python3-uvicorn_0.40.0.bb
@@ -11,6 +11,7 @@  SRC_URI += "file://0001-ptest-disable-failing-tests.patch"
 inherit pypi python_hatchling ptest-python-pytest
 
 PYPI_PACKAGE = "uvicorn"
+CVE_PRODUCT = "encode:uvicorn"
 
 RDEPENDS:${PN} = "\
     python3-click \