Issues

• Potential file inclusion attack via reading file - gtfs_rt_tools

  Aikido Securitymedium
  Metropolitan-Council/gtfs_rt_tools#30 · Filter by author driesejr opened on Sep 1, 2026

• Flask app debug mode may allow remote code execution - gtfs_rt_tools

  Aikido Securitymedium
  Metropolitan-Council/gtfs_rt_tools#29 · Filter by author driesejr opened on Sep 1, 2026

• Potential user input in HTTP request may allow SSRF attack - gtfs_rt_tools

  Aikido Securitymedium
  Metropolitan-Council/gtfs_rt_tools#28 · Filter by author driesejr opened on Sep 1, 2026

• Rendering unescaped input in HTML template can lead to XSS attacks - gtfs_rt_tools

  Aikido Securityhigh
  Metropolitan-Council/gtfs_rt_tools#27 · Filter by author driesejr opened on Sep 1, 2026

• Major upgrade for pandas - gtfs_rt_tools

  Aikido Securitylow
  Metropolitan-Council/gtfs_rt_tools#26 · Filter by author driesejr opened on Sep 1, 2026

• Minor upgrade for idna - gtfs_rt_tools

  Aikido Securitylow
  Metropolitan-Council/gtfs_rt_tools#25 · Filter by author driesejr opened on Sep 1, 2026

• Minor upgrade for flask - gtfs_rt_tools

  Aikido Securitymedium
  Metropolitan-Council/gtfs_rt_tools#24 · Filter by author driesejr opened on Sep 1, 2026

• Minor upgrade for numpy - gtfs_rt_tools

  Aikido Securitymedium
  Metropolitan-Council/gtfs_rt_tools#23 · Filter by author driesejr opened on Sep 1, 2026

• Minor upgrade for requests - gtfs_rt_tools

  Aikido Securitymedium
  Metropolitan-Council/gtfs_rt_tools#22 · Filter by author driesejr opened on Sep 1, 2026

• Major upgrade for pyarrow - gtfs_rt_tools

  Aikido Securityhigh
  Metropolitan-Council/gtfs_rt_tools#21 · Filter by author driesejr opened on Sep 1, 2026

• Minor upgrade for Werkzeug - gtfs_rt_tools

  Aikido Securityhigh
  Metropolitan-Council/gtfs_rt_tools#20 · Filter by author driesejr opened on Sep 1, 2026

• Minor upgrade for urllib3 - gtfs_rt_tools

  Aikido Securityhigh
  Metropolitan-Council/gtfs_rt_tools#19 · Filter by author driesejr opened on Sep 1, 2026

• Small upgrade for jinja2 - gtfs_rt_tools

  Aikido Securityhigh
  Metropolitan-Council/gtfs_rt_tools#18 · Filter by author driesejr opened on Sep 1, 2026

• Rendering unescaped input in HTML template can lead to XSS attacks

  Aikido Securityhigh
  Metropolitan-Council/gtfs_rt_tools#10 · Filter by author driesejr opened on Jul 21, 2026

• Using document write methods can lead to XSS attacks - gtfs_rt_tools

  Aikido Securityhigh
  Metropolitan-Council/gtfs_rt_tools#9 · Filter by author driesejr opened on Jul 21, 2026

• Add high-level workflow

  Metropolitan-Council/gtfs_rt_tools#8 · Filter by author MCMaurer opened on Oct 24, 2024
  

• Feed comparison upgrades

  Metropolitan-Council/gtfs_rt_tools#7 · Filter by author MCMaurer opened on Oct 24, 2024
  

• Add function to map + buffer

  Metropolitan-Council/gtfs_rt_tools#6 · Filter by author MCMaurer opened on Oct 9, 2024
  

• Add static GTFS

  Metropolitan-Council/gtfs_rt_tools#5 · Filter by author MCMaurer opened on Oct 9, 2024
  

• Add TripUpdates to VP on map

  Metropolitan-Council/gtfs_rt_tools#4 · Filter by author MCMaurer opened on Oct 9, 2024
  

• add replay feature

  Metropolitan-Council/gtfs_rt_tools#2 · Filter by author MCMaurer opened on Oct 9, 2024
  

• Add filters by route/vehicle

  Metropolitan-Council/gtfs_rt_tools#1 · Filter by author MCMaurer opened on Oct 9, 2024