How many CVEs have patched get_scopes?

2 published CVEs changed get_scopes in cvat-ai/cvat, in 3 distinct patches totalling 34 changed lines, between 2024 and 2024.

What is the latest CVE that changed get_scopes?

CVE-2024-47172, published 2024-09-30, changed lines 289 to 754 of cvat/apps/engine/permissions.py.

How does get_scopes compare to the rest of cvat-ai/cvat?

cvat-ai/cvat has 22 CVEs with a located fix in total; 2 of them changed get_scopes.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

RadicalNotion.AI

Log in Create an account

cvat-ai/cvat

Function

3 files

get_scopes

Name: get_scopes in cvat-ai/cvat: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Defined in 3 files

Last patched September 30, 2024

2

CVEs

That changed this function

3

Distinct patches

Backports counted once

34

Lines changed

Added plus removed

2024

Years

By CVE publication date

Overview

get_scopes in cvat-ai/cvat was changed by 2 published CVE fixes in 2024, in 3 distinct patches that added or removed 34 lines in total.

The name occurs in 3 files: cvat/apps/engine/permissions.py, cvat/apps/organizations/permissions.py, cvat/apps/webhooks/permissions.py.

cvat-ai/cvat has 22 CVEs with a located fix in total, so 9% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed get_scopes, newest first, with the lines each fix touched.

CVE-2024-47172
CVE-2024-47172 · cvat/apps/engine/permissions.py · lines 289–754 · +15 −10 in 5 hunks
Medium · CVSS 5.4
EPSS 0.3%2024-09-30
CVE-2024-47172
CVE-2024-47172 · cvat/apps/organizations/permissions.py · lines 176–179 · +4 −1
Medium · CVSS 5.4
EPSS 0.3%2024-09-30
Computer Vision Annotation Tool (CVAT) is missing authorization for endpoints related to webhook deliveries

CVE-2024-45393 · cvat/apps/webhooks/permissions.py · lines 61–64 · +4 −0

Medium · CVSS 6.4

EPSS 0.2%2024-09-10

Get an alert when the next CVE fix lands in cvat-ai/cvat, with the patched functions.

Monitor cvat CVEs

Other functions in these files

Functions in the same files that CVE fixes also changed.

1_get_scopescvat/apps/engine/permissions.py1 CVEs · 1 patches2026

Other hotspots in the repository

Functions in cvat-ai/cvat changed by the most CVE fixes.

retrieve2 CVEs · cvat/apps/engine/views.py _import_task2 CVEs · cvat/apps/engine/backup.py invoke2 CVEs · cvat/apps/lambda_manager/views.py list2 CVEs · cvat/apps/lambda_manager/views.py create2 CVEs · cvat/apps/lambda_manager/views.py get_job2 CVEs · cvat/apps/lambda_manager/views.py

All patched functions in cvat-ai/cvat

Frequently asked questions

Common questions about CVE fixes to get_scopes.

How many CVEs have patched get_scopes?: 2 published CVEs changed get_scopes in cvat-ai/cvat, in 3 distinct patches totalling 34 changed lines, between 2024 and 2024.
What is the latest CVE that changed get_scopes?: CVE-2024-47172, published 2024-09-30, changed lines 289 to 754 of cvat/apps/engine/permissions.py.
How does get_scopes compare to the rest of cvat-ai/cvat?: cvat-ai/cvat has 22 CVEs with a located fix in total; 2 of them changed get_scopes.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track cvat-ai/cvat CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing