[Medium severity] Denial of Service (DoS) (Due: 10/25/2020)

[fecjjeng]

https://app.snyk.io/org/fecgov/project/a95ea997-b012-4b3b-a026-2fdbe6ac0398

Vulnerable module: | sqlalchemy
Introduced through: | sqlalchemy@1.3.1, sqlalchemy-postgres-copy@0.3.0 and others
Exploit maturity: | No known exploit
Fixed in: | 1.3.19

Check dependencies:

• Flask-SQLAlchemy
  • Flask-SQLAlchemy==2.4.1
    • SQLAlchemy [required: >=0.8.0, installed: 1.3.1]
• marshmallow-sqlalchemy
  • marshmallow-sqlalchemy [required: >=0.4.1, installed: 0.15.0]
    • SQLAlchemy [required: >=0.9.7, installed: 1.3.1]
• sqlalchemy-postgres-copy
  • sqlalchemy [required: Any, installed: 1.3.1]

Action items:

• Test thoroughly since we're jumping from .1 to .19, don't rely solely on automated tests

Completion criteria:

• Verify that this is a problem and address the vulnerability appropriately