[PR #3007] [MERGED] fix: use subprocess instead of os.system in fetch_github_stars.py #4358

New Issue

GiteaMirror · 2026-04-15T10:05:48-05:00

GiteaMirror commented

2026-04-15 10:05:48 -05:00

📋 Pull Request Information

Original PR: https://github.com/vinta/awesome-python/pull/3007
Author: @orbisai0security
Created: 3/30/2026
Status: ✅ Merged
Merged: 3/30/2026
Merged by: @vinta

Base: master ← Head: fix-fix-v-006-graphql-injection-sanitization

📝 Commits (1)

babb09f fix: use subprocess instead of os.system in fetch_github_stars.py

📊 Changes

1 file changed (+5 additions, -1 deletions)

View changed files

📝 website/fetch_github_stars.py (+5 -1)

📄 Description

Summary

Fix critical severity security issue in website/fetch_github_stars.py.

Vulnerability

Field	Value
ID	V-006
Severity	CRITICAL
Scanner	multi_agent_ai
Rule	`V-006`
File	`website/fetch_github_stars.py:179`

Description: The Python CLI scripts at website/fetch_github_stars.py:179 and website/build.py:208 serve as entry points that invoke the compiled C/C++ hyphen binary. If these scripts use subprocess.call(), os.s...

Changes

website/fetch_github_stars.py

Verification

Build passes
Scanner re-scan confirms fix
Code review passed

Automated security fix by OrbisAI Security

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/vinta/awesome-python/pull/3007 **Author:** [@orbisai0security](https://github.com/orbisai0security) **Created:** 3/30/2026 **Status:** ✅ Merged **Merged:** 3/30/2026 **Merged by:** [@vinta](https://github.com/vinta) **Base:** `master` ← **Head:** `fix-fix-v-006-graphql-injection-sanitization` --- ### 📝 Commits (1) - [`babb09f`](https://github.com/vinta/awesome-python/commit/babb09fc5f58fdc110a584718dbfa12ca70fee46) fix: use subprocess instead of os.system in fetch_github_stars.py ### 📊 Changes **1 file changed** (+5 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `website/fetch_github_stars.py` (+5 -1) </details> ### 📄 Description ## Summary Fix critical severity security issue in `website/fetch_github_stars.py`. ## Vulnerability | Field | Value | |-------|-------| | **ID** | V-006 | | **Severity** | CRITICAL | | **Scanner** | multi_agent_ai | | **Rule** | `V-006` | | **File** | `website/fetch_github_stars.py:179` | **Description**: The Python CLI scripts at website/fetch_github_stars.py:179 and website/build.py:208 serve as entry points that invoke the compiled C/C++ hyphen binary. If these scripts use subprocess.call(), os.s... ## Changes - `website/fetch_github_stars.py` ## Verification - [x] Build passes - [x] Scanner re-scan confirms fix - [x] Code review passed --- *Automated security fix by [OrbisAI Security](https://orbisappsec.com)* --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2026-04-15 10:05:48 -05:00

GiteaMirror closed this issue

2026-04-15 10:05:48 -05:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/awesome-python#4358