github-starred/awesome-python
2
0
Fork 0
mirror of https://github.com/vinta/awesome-python.git synced 2026-11-10 01:34:28 -06:00
Code Issues 461 Packages Projects Releases Wiki Activity

[PR #3007] [MERGED] fix: use subprocess instead of os.system in fetch_github_stars.py #6714

New Issue
Closed
opened 2026-04-17 07:38:10 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-17 07:38:10 -05:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/vinta/awesome-python/pull/3007
Author: @orbisai0security
Created: 3/30/2026
Status: ✅ Merged
Merged: 3/30/2026
Merged by: @vinta

Base: master ← Head: fix-fix-v-006-graphql-injection-sanitization

📝 Commits (1)

  • babb09f fix: use subprocess instead of os.system in fetch_github_stars.py

📊 Changes

1 file changed (+5 additions, -1 deletions)

View changed files

📝 website/fetch_github_stars.py (+5 -1)

📄 Description

Summary

Fix critical severity security issue in website/fetch_github_stars.py.

Vulnerability

Field Value
ID V-006
Severity CRITICAL
Scanner multi_agent_ai
Rule V-006
File website/fetch_github_stars.py:179

Description: The Python CLI scripts at website/fetch_github_stars.py:179 and website/build.py:208 serve as entry points that invoke the compiled C/C++ hyphen binary. If these scripts use subprocess.call(), os.s...

Changes

  • website/fetch_github_stars.py

Verification

  • Build passes
  • Scanner re-scan confirms fix
  • Code review passed

Automated security fix by OrbisAI Security

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/vinta/awesome-python/pull/3007 **Author:** [@orbisai0security](https://github.com/orbisai0security) **Created:** 3/30/2026 **Status:** ✅ Merged **Merged:** 3/30/2026 **Merged by:** [@vinta](https://github.com/vinta) **Base:** `master` ← **Head:** `fix-fix-v-006-graphql-injection-sanitization` --- ### 📝 Commits (1) - [`babb09f`](https://github.com/vinta/awesome-python/commit/babb09fc5f58fdc110a584718dbfa12ca70fee46) fix: use subprocess instead of os.system in fetch_github_stars.py ### 📊 Changes **1 file changed** (+5 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `website/fetch_github_stars.py` (+5 -1) </details> ### 📄 Description ## Summary Fix critical severity security issue in `website/fetch_github_stars.py`. ## Vulnerability | Field | Value | |-------|-------| | **ID** | V-006 | | **Severity** | CRITICAL | | **Scanner** | multi_agent_ai | | **Rule** | `V-006` | | **File** | `website/fetch_github_stars.py:179` | **Description**: The Python CLI scripts at website/fetch_github_stars.py:179 and website/build.py:208 serve as entry points that invoke the compiled C/C++ hyphen binary. If these scripts use subprocess.call(), os.s... ## Changes - `website/fetch_github_stars.py` ## Verification - [x] Build passes - [x] Scanner re-scan confirms fix - [x] Code review passed --- *Automated security fix by [OrbisAI Security](https://orbisappsec.com)* --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-17 07:38:10 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
pull-request
Mirrored from GitHub Pull Request
No labels pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
GiteaMirror ninjasurge (Kaehlen Rog)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/awesome-python#6714