New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

release 0.9.0 #2239

Open

fedml-alex wants to merge 405 commits into master from dev/v0.7.0

Open

release 0.9.0 #2239

Merge pull request #2244 from FedML-AI/charlie/dev/v0.7.0

GitHub Advanced Security / CodeQL failed Dec 25, 2024 in 4s

7 new alerts including 5 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

5 high
2 medium

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 214 in python/fedml/computing/scheduler/comm_utils/container_utils.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

sensitive data (password)

as clear text.

Check failure on line 217 in python/fedml/computing/scheduler/comm_utils/container_utils.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

sensitive data (password)

as clear text.

Check failure on line 219 in python/fedml/computing/scheduler/comm_utils/container_utils.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

sensitive data (password)

as clear text.

Check failure on line 84 in python/fedml/computing/scheduler/master/cloud_server_manager.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

sensitive data (secret)

as clear text.

Check failure on line 145 in python/fedml/computing/scheduler/model_scheduler/device_model_deployment.py

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs

sensitive data (password)

as clear text.

Check warning on line 110 in python/fedml/computing/scheduler/model_scheduler/device_model_inference.py

Code scanning / CodeQL

Information exposure through an exception Medium

Stack trace information

flows to this location and may be exposed to an external user.

Stack trace information

flows to this location and may be exposed to an external user.

Check warning on line 186 in python/fedml/computing/scheduler/model_scheduler/device_model_inference.py

Code scanning / CodeQL

Information exposure through an exception Medium

Stack trace information

flows to this location and may be exposed to an external user.

Stack trace information

flows to this location and may be exposed to an external user.