SHAdd0WTAka / Zen-Ai-Pentest / 23092030827

push

github

security: Fix HIGH severity vulnerabilities (#249)

* test(coverage): Phase 1 - API Layer and Core Tools

- Add comprehensive API layer tests (51 tests)
  - api/schemas.py tests (99.6% coverage achieved)
  - api/routes/ import tests for all modules
  - api/auth tests

- Add Core and Tools tests (19 tests)
  - Core module import tests
  - Tools integration import tests
  - Basic functionality tests

Coverage Progress:
- Previous: 7.13%
- Current: 10.05%
- Phase 1 Target: 50%
- Gap: 39.95%

Next steps:
- Need additional tests for api/main.py (22.88% currently)
- Need tests for api/routes/* modules
- Need deeper integration tests

Generated by Coverage Achiever
2026-03-14

* security: Fix HIGH severity vulnerabilities

- Update python-multipart to >=0.0.23 (CVE-2025-41422, Arbitrary File Write)
- Update cryptography to >=44.0.2 (CVE-2024-12797, SECT curves subgroup attack)
- Add weasyprint >=65.0 (SSRF Protection Bypass)
- Fix bare except clauses in core/ and api/ routes

Refs: GitHub Security Alerts #134, #136, #137

* chore: stash pop

---------

Co-authored-by: Kimi Claw <kimi@openclaw.ai>

144 of 2086 branches covered (6.9%)

Branch coverage included in aggregate %.

2681 of 17163 relevant lines covered (15.62%)

0.16 hits per line