Skip to content
Open-Source Registry

pypi / rasa-pro / 3.16.34

rasa-pro 3.16.34

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured RiskcriticalVulnscritical
processes
761
operations
342K
packages
223
compiler runs
3
connections
2
build time
4m 30s
job time
4m 30s
capture
4.9 MB
records
643K
bytes / record
7.7
run 57daf341-3c1d-445a-a672-3a4e9ebc0b01 · built 2026-11-04 · complete View on PyPI

Graph

secret-exfil · critical
4

Checks

14 of 19 clear Network activity Sensitive data access and transfer +3 more
Build behavior▲▲✓✓✓✓✓✓✓✓✓
Supply chain▲▲✓✓✓▲✓
Pipeline✓

Detections

3
  • Credential store contents reached a network peer
    raw.githubusercontent.com:443 › raw.githubusercontent.com:443
    critical
  • Package code connected to an undeclared host
    raw.githubusercontent.com:443 › raw.githubusercontent.com:443, pypi.org
    medium
  • coloredlogs 15.0.1 installs coloredlogs.pth, which Python runs at every start
    coloredlogs 15.0.1
    low

Detection

criticalwitnessed

Credential store contents reached a network peer

Possible credential exposure

Subject
raw.githubusercontent.com:443
Destination
raw.githubusercontent.com:443
Jobs
build-import
Rule
secret-exfil · rasa-pro

Witness chain

  1. /home/runner/work/rasa/rasa/.env
    source
  2. raw.githubusercontent.com:443via .venv/bin/python /home/runner/work/_temp/exercise.py rasa-pro f2382495721f99c4852c48173c62d2ccbbf753b415b4fe9a8223d69454919123
    • Sensitive-file read linked to a network connectionfrom /home/runner/work/rasa/rasa/.env

      Credential store contents linked to this connection through build-time code: /home/runner/work/rasa/rasa/.env

    sink

Evidence

  • Credential store contents linked to this connection through build-time code: /home/runner/work/rasa/rasa/.env

What came before it

Loading the graph

Processes

build-import

python

Ran
.venv/bin/python /home/runner/work/_temp/exercise.py rasa-pro f2382495721f99c4852c48173c62d2ccbbf753b415b4fe9a8223d69454919123
Invoked by
.venv/bin/python /home/runner/work/_temp/exercise.py rasa-pro f2382495721f99c4852c48173c62d2ccbbf753b415b4fe9a8223d69454919123

Remediation

Treat the credential as exposed: revoke or rotate it, then remove the build-time code that sent it. The witness chain names the file, the processes that carried its bytes and the destination.

Detection

mediumwitnessed

Package code connected to an undeclared host

Unexpected network connection

Subject
raw.githubusercontent.com:443
Destination
raw.githubusercontent.com:443, pypi.org
Jobs
build-import, build-import
Rule
egress · rasa-pro

Evidence

  1. Connection outside the process’s allowed destinationscause

    opened by python

    subject raw.githubusercontent.com:443

    by /home/runner/work/rasa/rasa/.venv/bin/python -c import importlib, pkgutil, sys, threading, time THREAD_WAIT = 3.0 m = importlib.import_module(sys.argv[1]) coun…

  2. Allowed hostssupport

    Declared or allowed hosts: pypi.org

  3. Why it matterscontext

    The package's own code reached this host while the release ran; no manifest, tool profile, network allowlist entry or accepted download covers it.

What came before it · build-import

Loading the graph

What came before it · build-import

Loading the graph

Processes

build-import

python›python

Ran
/home/runner/work/rasa/rasa/.venv/bin/python -c import importlib, pkgutil, sys, threading, time THREAD_WAIT = 3.0 m = importlib.import_module(sys.argv[1]) coun…
Invoked by
.venv/bin/python /home/runner/work/_temp/imports.py rasa-pro
Lineage · 2 processes
  1. python.venv/bin/python /home/runner/work/_temp/imports.py rasa-pro1665
  2. python/home/runner/work/rasa/rasa/.venv/bin/python -c import importlib, pkgutil, sys, threading, time THREAD_WAIT = 3.0 m = importlib.import_module(sys.argv[1]) coun…1667

build-import

python›python

Ran
/home/runner/work/rasa/rasa/.venv/bin/python /home/runner/work/rasa/rasa/.venv/bin/rasa --help
Invoked by
.venv/bin/python /home/runner/work/_temp/imports.py rasa-pro
Lineage · 2 processes
  1. python.venv/bin/python /home/runner/work/_temp/imports.py rasa-pro1665
  2. python/home/runner/work/rasa/rasa/.venv/bin/python /home/runner/work/rasa/rasa/.venv/bin/rasa --help1674

Remediation

Identify the request. If required, declare the host in the relevant manifest or tool profile, or add a reviewed allow_hosts entry. Otherwise remove it.

Detection

lowwitnessed

coloredlogs 15.0.1 installs coloredlogs.pth, which Python runs at every start

Package installs code that runs at every start

Subject
coloredlogs 15.0.1
Jobs
build-import
Rule
startup-hook

Evidence

  1. Installs a module run at every startcause

    coloredlogs 15.0.1 installs coloredlogs.pth at the root of /home/runner/work/rasa/rasa/.venv-develop/lib/python3.13/site-packages, /home/runner/work/rasa/rasa/.venv/lib/python3.13/site-packages. Every Python started in that environment runs it before its own program.

    subject coloredlogs 15.0.1

Remediation

Find out why the package installs code that runs at every Python start. Unless that is its purpose, pin the previous release, rebuild the environment and rotate the credentials the jobs that used it could reach.

Network

2 peers
  • raw.githubusercontent.com:443 rasa-pro's own build code · python3.13 (rasa-pro); rasa (rasa-pro) · Fastly, Inc. unjudged
  • files.pythonhosted.org:8080 the package manager · python3.13 (rasa-pro) via pypi.org ecosystem
Vulnerabilities6FixSeverity
Dependencies
certifi 2025.11.12>=2026.10.18
GHSA-6q48-6c7w-9gw2certifi bundles emSign root CAs with compromised intermediate CA keyscritical
dnspython 2.8.0>=2.9.0
CVE-2026-114605dnspython dns.name.from_wire_parser() excessive CPU usehigh
opentelemetry-api 1.33.1>=1.45.1
CVE-2026-114603OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-apimedium
sanic 22.12.0>=24.12.1
CVE-2026-85078sanic chunked trailer request smuggling allows hidden second request executionmedium
setuptools 80.10.2>=84.1.0
CVE-2026-59890setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+medium
GHSA-xmj3-9gf7-h52wsetuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Descriptionlow

Dependencies

223
Dependencies223Build behaviour
a2a-sdk0.3.26
absl-py2.3.1
aio-pika9.6.2
aiofiles25.1.0
aiohappyeyeballs2.7.1
aiohttp3.14.5
aiormq6.9.4
aioshutil1.6
aiosignal1.4.0
annotated-types0.8.0
anyio4.16.0
apscheduler3.11.3
async-property0.2.2
attrs25.4.0
audioop-lts0.2.2
aws-msk-iam-sasl-signer-python1.0.2
azure-core1.41.0
azure-identity1.25.3
azure-storage-blob12.27.1
bidict0.24.1
boto31.43.123
botocore1.43.123
build1.6.1
cachecontrol0.14.4
cachetools6.2.6
certifi2025.11.12
cffi2.1.1
charset-normalizer3.5.2
click8.5.0
cloudpickle3.1.2
colorama0.4.6
colorclass2.2.2
coloredlogs15.0.1
colorhash2.1.0
confluent-kafka2.16.1
contourpy1.4.0
cryptography50.0.2
cycler0.12.1
dask2024.8.2
demoji1.1.0
deprecated3.0.1
deprecation2.1.0
distro1.9.0
dnspython2.8.0
docopt0.6.2
duoname0.0.2
et-xmlfile2.0.0
faiss-cpu1.13.2
fastuuid0.14.0
filelock4.2.8
fonttools4.68.0
frozenlist1.8.0
fsspec2026.9.0
google-api-core2.33.0
google-auth2.41.1
google-cloud-core2.8.0
google-cloud-storage3.4.1
google-crc32c1.9.0
google-resumable-media2.11.0
googleapis-common-protos1.75.0
greenlet3.5.6
griffe1.15.0
grpcio1.66.2
grpcio-health-checking1.59.5
grpcio-tools1.66.2
h110.16.0
h24.4.1
hf-xet1.8.0
hpack4.2.0
httpcore1.0.9
httpcore22.16.0
httptools0.9.0
httpx0.28.1
httpx-sse0.4.3
httpx22.16.0
huggingface-hub2.4.0
humanfriendly10.0
hvac2.4.0
hyperframe6.1.0
idna3.20
importlib-metadata8.6.1
importlib-resources6.5.2
iniconfig2.3.1
isodate0.7.2
jinja23.1.6
jiter0.18.0
jmespath1.1.0
joblib1.6.0
jsonpatch1.42
jsonpickle4.0.5
jsonpointer3.8
jsonschema4.26.0
jsonschema-specifications2025.9.1
jwcrypto1.6.1
kiwisolver1.5.1
langcodes3.5.1
language-data1.4.0
litellm1.101.3
locket1.0.0
marisa-trie1.4.1
markdown-it-py4.2.0
markupsafe3.0.4
matplotlib3.10.9
mcp1.30.0
mdurl0.1.2
msal1.39.0
msal-extensions1.3.1
msgpack1.2.4
multidict6.9.1
networkx3.4.2
numpy2.1.3
openai2.54.0
openai-agents0.12.5
openpyxl3.1.5
opentelemetry-api1.33.1
opentelemetry-exporter-otlp1.33.1
opentelemetry-exporter-otlp-proto-common1.33.1
opentelemetry-exporter-otlp-proto-grpc1.33.1
opentelemetry-exporter-otlp-proto-http1.33.1
opentelemetry-proto1.33.1
opentelemetry-sdk1.33.1
opentelemetry-semantic-conventions0.54b1
orjson3.13.0
packaging24.2
pamqp3.3.0
pandas3.0.6
partd1.4.2
pep440-version-utils1.2.0
pillow13.0.0
pluggy1.7.0
ply3.11
portalocker2.10.1
prompt-toolkit3.0.53
propcache0.5.4
proto-plus1.28.2
protobuf5.29.6
psutil5.9.8
psycopg2-binary2.9.13
pyasn10.6.5
pyasn1-modules0.4.2
pycparser3.12
pydantic2.14.2
pydantic-core2.50.2
pydantic-settings2.16.2
pydot4.0.1
pygments2.21.0
pyjwt2.15.1
pykwalify1.8.0
pymilvus2.6.17
pymongo4.18.3
pyparsing3.3.3
pypred0.4.0
pyproject-hooks1.3.3
pytest9.2.0
python-dateutil2.8.2
python-dotenv1.2.4
python-engineio4.15.1
python-keycloak5.8.1
python-multipart0.0.33
python-socketio5.16.4
pytz2025.2
pyyaml6.0.3
qdrant-client1.18.0
questionary2.1.1
rasa-sdk3.16.5
redis6.4.0
referencing0.37.0
regex2026.9.29
requests2.34.2
requests-toolbelt1.0.0
rich14.2.0
rpds-py2026.9.1
rsa4.9.1
ruamel-yaml0.17.21
s3transfer0.19.3
sanic22.12.0
sanic-jwt1.8.0
sanic-openapi21.12.0
sanic-routing22.8.0
scikit-learn1.6.1
scipy1.14.1
sentry-sdk2.43.0
simple-websocket1.1.0
six1.17.0
sniffio1.3.1
sqlalchemy2.0.57
sse-starlette3.6.0
starlette1.3.1
structlog25.5.0
structlog-sentry2.2.1
tarsafe0.0.5
tenacity8.4.2
terminaltables3.1.10
threadpoolctl3.7.0
tiktoken0.12.0
tokenizers0.23.3
toolz1.2.0
tqdm4.70.1
truststore0.10.5
types-cachetools6.2.0.20260408
types-protobuf5.29.1.20250403
types-requests2.33.0.20261030
typing-extensions4.16.0
typing-inspection0.4.5
typing-utils0.1.0
tzlocal5.4.5
ujson5.13.0
urllib32.8.0
uvicorn0.54.0
uvloop0.23.0
wcwidth0.9.4
websockets13.1
werkzeug3.1.9
wrapt2.5.2
wsproto1.3.2
yarl1.25.1
zipp4.1.2
pip26.2.2
pip26.3
poetry-core2.5.0
setuptools80.10.2
wheel0.48.0
~ackaging26.3

Versions500

Raw data

capture
4.9 MB
records
642,698
bytes per record
7.7

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-import success · Generated 2026-11-04 · run 57daf341-3c1d-445a-a672-3a4e9ebc0b01

analysis 0.1.0 · 2026-11-04 · 355de49 · graph v2