From bf149c406ab90efa2872e05a74c75c3233e67fc8 Mon Sep 17 00:00:00 2001 From: Robert Scott Date: Fri, 25 Feb 2022 19:03:08 +0000 Subject: [PATCH] python310Packages.sanic: disable due to GHSA-7p79-6x2v-5h88 sanic doesn't support python 3.10 yet and attempting to use it opens users to a DoS attack --- pkgs/development/python-modules/sanic/default.nix | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/pkgs/development/python-modules/sanic/default.nix b/pkgs/development/python-modules/sanic/default.nix index 660ca5de80bf..63c24e9936fc 100644 --- a/pkgs/development/python-modules/sanic/default.nix +++ b/pkgs/development/python-modules/sanic/default.nix @@ -13,6 +13,7 @@ , pytest-sugar , pytestCheckHook , pythonOlder +, pythonAtLeast , sanic-routing , sanic-testing , ujson @@ -26,7 +27,8 @@ buildPythonPackage rec { version = "21.12.1"; format = "setuptools"; - disabled = pythonOlder "3.7"; + disabled = pythonOlder "3.7" || + pythonAtLeast "3.10"; # see GHSA-7p79-6x2v-5h88 src = fetchFromGitHub { owner = "sanic-org";