@vercel/python
Advanced tools
@vercel/python - npm Package Compare versions
+1
-1
| { | ||
| "name": "@vercel/python", | ||
| "version": "6.1.5", | ||
| "version": "6.1.6", | ||
| "main": "./dist/index.js", | ||
@@ -5,0 +5,0 @@ "license": "Apache-2.0", |
+12
-1
@@ -828,4 +828,15 @@ from __future__ import annotations | ||
| status_code = message['status'] | ||
| headers = Headers(message.get('headers', [])) | ||
| raw_headers = message.get('headers', []) | ||
| # Headers from werkzeug transform bytes header value | ||
| # from b'value' to "b'value'" so we need to process | ||
| # ASGI headers manually | ||
| decoded_headers = [] | ||
| for key, value in raw_headers: | ||
| decoded_key = key.decode() if isinstance(key, bytes) else key | ||
| decoded_value = value.decode() if isinstance(value, bytes) else value | ||
| decoded_headers.append((decoded_key, decoded_value)) | ||
| headers = Headers(decoded_headers) | ||
| self.on_request(headers, status_code) | ||
@@ -832,0 +843,0 @@ self.state = ASGICycleState.RESPONSE |
New alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 9 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Fixed alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 9 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
355599
0.17%- Lines of code
10037
0.09%