PyPi: Fhir-Pyrate

CVE-2017-12852

Transitive

Safety vulnerability ID: 53730

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Aug 15, 2017 Updated at Dec 05, 2024
Scan your Python projects for vulnerabilities →

Advisory

Fhir-pyrate 0.2.0 requires 'numpy' versions '^1.22' to include security fixes.

Affected package

fhir-pyrate

Latest version: 0.2.1

FHIR-PYrate is a package that provides a high-level API to query FHIR Servers for bundles of resources and return the structured information as pandas DataFrames. It can also be used to filter resources using RegEx and SpaCy and download DICOM studies and series.

Affected versions

Fixed versions

Vulnerability changelog

Much has changed! Some parameters names have been deprecated and others have been added, below there is a summary of all the pull requests.
The most important changes are:
- Some fuctions have been added to avoid using `query_to_dataframe`.
- Bundle caching
- If multiple resources are queried, a dictionary with multiple DataFrames is returned.
- Read operations are now supported

What's Changed
* Update to 3.8 because of numpy security update by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/64
* Convert basic bundle collection to generator by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/60
* Add history support by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/74
* Add handling for dataframe functions using the _id parameter by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/72
* Fix the FHIR server URL bug for local servers by introducing a new variable that contains the domain by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/78
* Allow to specify multiple query arguments in df contraints by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/76
* Specify Package Version Inside Package by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/80
* Allow to turn off checks for dicom download by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/85
* Add resource name to the TQDM description by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/88
* Merge trade rows for dataframe and trade rows for dataframe with ref by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/89
* Allow addition of any column to the trade rows for dataframe result by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/90
* Convert logging.warn to warnings when appropriate by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/105
* Convert received resources from read operations to bundles for consistency by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/106
* Smarter bundle caching by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/107
* Make current beta compatible with 0.1.0 by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/112
* Fix efficiency problem with merge on by returning dataframes giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/113
* Make fhirpathpy import greedy by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/116
* Support for custom certificates needed by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/119
* Improve documentation by giuliabaldini in https://github.com/UMEssen/FHIR-PYrate/pull/122


**Full Changelog**: https://github.com/UMEssen/FHIR-PYrate/compare/v0.1.0...v0.2.0

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application

Severity Details

CVSS Base Score

HIGH 7.5

CVSS v3 Details

HIGH 7.5
Attack Vector (AV)
NETWORK
Attack Complexity (AC)
LOW
Privileges Required (PR)
NONE
User Interaction (UI)
NONE
Scope (S)
UNCHANGED
Confidentiality Impact (C)
NONE
Integrity Impact (I)
NONE
Availability Availability (A)
HIGH

CVSS v2 Details

MEDIUM 5.0
Access Vector (AV)
NETWORK
Access Complexity (AC)
LOW
Authentication (Au)
NONE
Confidentiality Impact (C)
NONE
Integrity Impact (I)
NONE
Availability Impact (A)
PARTIAL