game engines/web frameworks: 27 CWE-407 defects + 3 CLEAN; 194 sites, 78 ecosystems

2026-03-27 14:14:49 -04:00 · 2026-03-27 14:14:49 -04:00 · 4d3fcc8e73
commit 4d3fcc8e73
parent 547a9f5738
76 changed files with 6216 additions and 17 deletions
--- a/defects/fastapi/patch/fastapi-0001-get-flat-dependant-visited-set.patch
+++ b/defects/fastapi/patch/fastapi-0001-get-flat-dependant-visited-set.patch
@ -0,0 +1,19 @@
+--- a/fastapi/dependencies/utils.py
+++ b/fastapi/dependencies/utils.py
+@@ -139,13 +139,13 @@ def _get_dependant_for_depends(
+ def get_flat_dependant(
+     dependant: Dependant,
+     *,
+     skip_repeats: bool = False,
+-    visited: list[DependencyCacheKey] | None = None,
+    visited: set[DependencyCacheKey] | None = None,
+     parent_oauth_scopes: list[str] | None = None,
+ ) -> Dependant:
+     if visited is None:
+-        visited = []
+-    visited.append(dependant.cache_key)
+        visited = set()
+    visited.add(dependant.cache_key)
+     use_parent_oauth_scopes = (parent_oauth_scopes or []) + (
+         dependant.oauth_scopes or []
+     )