Skip to content
Open-Source Registry

pypi / rasa-pro / 3.20.8

rasa-pro 3.20.8

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured RiskcriticalVulnshigh
processes
793
operations
350K
packages
226
compiler runs
3
connections
2
build time
4m 49s
job time
4m 49s
capture
5.2 MB
records
652K
bytes / record
7.9
run ce22b067-2bdc-4819-a06d-d0671fd1eb1f · built 2026-11-04 · complete View on PyPI

Graph

secret-exfil · critical
4

Checks

14 of 19 clear Network activity Sensitive data access and transfer +3 more
Build behavior▲▲✓✓✓✓✓✓✓✓✓
Supply chain▲▲✓✓✓▲✓
Pipeline✓

Detections

3
  • Credential store contents reached a network peer
    raw.githubusercontent.com:443 › raw.githubusercontent.com:443
    critical
  • Package code connected to an undeclared host
    raw.githubusercontent.com:443 › raw.githubusercontent.com:443, pypi.org
    medium
  • coloredlogs 15.0.1 installs coloredlogs.pth, which Python runs at every start
    coloredlogs 15.0.1
    low

Detection

criticalwitnessed

Credential store contents reached a network peer

Possible credential exposure

Subject
raw.githubusercontent.com:443
Destination
raw.githubusercontent.com:443
Jobs
build-import
Rule
secret-exfil · rasa-pro

Witness chain

  1. /home/runner/work/rasa/rasa/.env
    source
  2. raw.githubusercontent.com:443via /home/runner/work/rasa/rasa/.venv/bin/python -m rasa
    • Sensitive-file read linked to a network connectionfrom /home/runner/work/rasa/rasa/.env

      Credential store contents linked to this connection through build-time code: /home/runner/work/rasa/rasa/.env

    sink

Evidence

  • Credential store contents linked to this connection through build-time code: /home/runner/work/rasa/rasa/.env

What came before it

Loading the graph

Processes

build-import

python›python

Ran
/home/runner/work/rasa/rasa/.venv/bin/python -m rasa
Invoked by
.venv/bin/python /home/runner/work/_temp/exercise.py rasa-pro 743778cff825637d421da9be17f9eeced2a37cb3385d2720a7a2ea426ff995e5
Lineage · 2 processes
  1. python.venv/bin/python /home/runner/work/_temp/exercise.py rasa-pro 743778cff825637d421da9be17f9eeced2a37cb3385d2720a7a2ea426ff995e51759
  2. python/home/runner/work/rasa/rasa/.venv/bin/python -m rasa1766

Remediation

Treat the credential as exposed: revoke or rotate it, then remove the build-time code that sent it. The witness chain names the file, the processes that carried its bytes and the destination.

Detection

mediumwitnessed

Package code connected to an undeclared host

Unexpected network connection

Subject
raw.githubusercontent.com:443
Destination
raw.githubusercontent.com:443, pypi.org
Jobs
build-import, build-import
Rule
egress · rasa-pro

Evidence

  1. Connection outside the process’s allowed destinationscause

    opened by python

    subject raw.githubusercontent.com:443

    by /home/runner/work/rasa/rasa/.venv/bin/python -c import importlib, pkgutil, sys, threading, time THREAD_WAIT = 3.0 m = importlib.import_module(sys.argv[1]) coun…

  2. Allowed hostssupport

    Declared or allowed hosts: pypi.org

  3. Why it matterscontext

    The package's own code reached this host while the release ran; no manifest, tool profile, network allowlist entry or accepted download covers it.

What came before it · build-import

Loading the graph

What came before it · build-import

Loading the graph

Processes

build-import

python›python

Ran
/home/runner/work/rasa/rasa/.venv/bin/python -c import importlib, pkgutil, sys, threading, time THREAD_WAIT = 3.0 m = importlib.import_module(sys.argv[1]) coun…
Invoked by
.venv/bin/python /home/runner/work/_temp/imports.py rasa-pro
Lineage · 2 processes
  1. python.venv/bin/python /home/runner/work/_temp/imports.py rasa-pro1666
  2. python/home/runner/work/rasa/rasa/.venv/bin/python -c import importlib, pkgutil, sys, threading, time THREAD_WAIT = 3.0 m = importlib.import_module(sys.argv[1]) coun…1668

build-import

python›python

Ran
/home/runner/work/rasa/rasa/.venv/bin/python /home/runner/work/rasa/rasa/.venv/bin/rasa --help
Invoked by
.venv/bin/python /home/runner/work/_temp/imports.py rasa-pro
Lineage · 2 processes
  1. python.venv/bin/python /home/runner/work/_temp/imports.py rasa-pro1666
  2. python/home/runner/work/rasa/rasa/.venv/bin/python /home/runner/work/rasa/rasa/.venv/bin/rasa --help1676

Remediation

Identify the request. If required, declare the host in the relevant manifest or tool profile, or add a reviewed allow_hosts entry. Otherwise remove it.

Detection

lowwitnessed

coloredlogs 15.0.1 installs coloredlogs.pth, which Python runs at every start

Package installs code that runs at every start

Subject
coloredlogs 15.0.1
Jobs
build-import
Rule
startup-hook

Evidence

  1. Installs a module run at every startcause

    coloredlogs 15.0.1 installs coloredlogs.pth at the root of /home/runner/work/rasa/rasa/.venv-develop/lib/python3.14/site-packages, /home/runner/work/rasa/rasa/.venv/lib/python3.14/site-packages. Every Python started in that environment runs it before its own program.

    subject coloredlogs 15.0.1

Remediation

Find out why the package installs code that runs at every Python start. Unless that is its purpose, pin the previous release, rebuild the environment and rotate the credentials the jobs that used it could reach.

Network

2 peers
  • raw.githubusercontent.com:443 rasa-pro's own build code · python3.14 (rasa-pro); rasa (rasa-pro) · Fastly, Inc. unjudged
  • files.pythonhosted.org:8080 the package manager · python3.14 (rasa-pro) via pypi.org ecosystem
Vulnerabilities8FixSeverity
Dependencies
dnspython 2.8.0>=2.9.0
CVE-2026-114605dnspython dns.name.from_wire_parser() excessive CPU usehigh
pip 25.1.1>=26.2.0
CVE-2025-8869pip's fallback tar extraction doesn't check symbolic links point to extraction directorymedium
CVE-2026-13346pip would incorrectly handle doubly-encoded package URLs from indexesmedium
CVE-2026-3219pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP filesmedium
CVE-2026-6357pip Vulnerable to Inclusion of Functionality from Untrusted Control Spheremedium
CVE-2026-8643pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directorymedium
CVE-2026-1703pip Path Traversal vulnerabilitylow
setuptools 83.0.0>=84.1.0
GHSA-xmj3-9gf7-h52wsetuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Descriptionlow

Dependencies

226
Dependencies226Build behaviour
a2a-sdk0.3.26
absl-py2.4.0
aio-pika9.6.2
aiofiles25.1.0
aiohappyeyeballs2.7.1
aiohttp3.14.5
aiormq6.9.4
aioshutil1.6
aiosignal1.4.0
annotated-doc0.0.5
annotated-types0.8.0
anyio4.16.0
apscheduler3.11.3
attrs26.1.0
audioop-lts0.2.2
aws-msk-iam-sasl-signer-python1.0.2
azure-core1.41.0
azure-identity1.25.3
azure-storage-blob12.30.3
bidict0.24.1
boto31.43.123
botocore1.43.123
build1.6.1
cachecontrol0.14.4
cachetools7.2.8
certifi2026.10.23
cffi2.1.1
charset-normalizer3.5.2
click8.5.0
cloudpickle3.1.2
colorama0.4.6
colorclass2.2.2
coloredlogs15.0.1
colorhash2.3.0
confluent-kafka2.15.1
contourpy1.4.0
cryptography50.0.2
cycler0.12.1
dask2024.8.2
demoji1.1.0
deprecation2.1.0
distro1.9.0
dnspython2.8.0
docopt0.6.2
duoname0.0.2
et-xmlfile2.0.0
faiss-cpu1.14.3
fastapi0.162.0
fastuuid0.14.0
filelock4.2.9
fonttools4.68.0
frozenlist1.8.0
fsspec2026.9.0
google-api-core2.43.2
google-auth2.55.2
google-cloud-core2.8.0
google-cloud-storage3.12.1
google-crc32c1.9.0
google-resumable-media2.11.0
googleapis-common-protos1.76.0
greenlet3.5.6
griffe2.4.1
griffecli2.4.1
griffelib2.4.1
grpcio1.83.2
grpcio-health-checking1.83.2
h110.16.0
h24.4.1
hf-xet1.8.0
hpack4.2.0
html5tagger2.0.0
httpcore1.0.9
httpcore22.16.0
httptools0.9.0
httpx0.28.1
httpx-sse0.4.3
httpx22.16.0
huggingface-hub2.4.0
humanfriendly10.0
hvac2.4.0
hyperframe6.1.0
idna3.20
importlib-metadata8.6.1
importlib-resources7.1.0
iniconfig2.3.1
isodate0.7.2
jinja23.1.6
jiter0.18.0
jmespath1.1.0
joblib1.6.0
jsonpatch1.42
jsonpickle4.1.4
jsonpointer3.8
jsonschema4.26.0
jsonschema-specifications2025.9.1
jwcrypto1.6.1
kiwisolver1.5.1
langcodes3.5.1
language-data1.4.0
litellm1.101.6
locket1.0.0
marisa-trie1.4.1
markdown-it-py4.2.0
markupsafe3.0.4
matplotlib3.10.9
mcp1.30.0
mdurl0.1.2
msal1.39.0
msal-extensions1.3.1
msgpack1.2.4
multidict6.9.1
networkx3.4.2
numpy2.3.5
openai2.44.0
openai-agents0.13.6
openpyxl3.1.5
opentelemetry-api1.45.2
opentelemetry-exporter-http-transport0.66b2
opentelemetry-exporter-otlp1.45.2
opentelemetry-exporter-otlp-common0.66b2
opentelemetry-exporter-otlp-proto-common1.45.2
opentelemetry-exporter-otlp-proto-grpc1.45.2
opentelemetry-exporter-otlp-proto-http1.45.2
opentelemetry-proto1.45.2
opentelemetry-sdk1.45.2
opentelemetry-semantic-conventions0.66b2
orjson3.13.0
packaging26.3
pamqp3.3.0
pandas3.1.1
partd1.4.2
pillow13.0.0
pluggy1.7.0
ply3.11
portalocker3.2.0
prompt-toolkit3.0.28
propcache0.5.4
proto-plus1.29.0
protobuf7.35.1
psutil5.9.8
psycopg2-binary2.9.13
pyasn10.6.5
pyasn1-modules0.4.2
pycparser3.12
pydantic2.13.5
pydantic-core2.46.5
pydantic-settings2.16.2
pydot4.0.1
pygments2.21.0
pyjwt2.15.1
pykwalify1.8.0
pymilvus2.6.17
pymongo4.18.3
pyparsing3.3.3
pypred0.4.0
pyproject-hooks1.3.3
pytest9.2.0
python-dateutil2.9.0.post0
python-dotenv1.2.4
python-engineio4.13.5
python-keycloak7.1.1
python-multipart0.0.33
python-socketio5.16.4
pytz2026.2
pyyaml6.0.3
qdrant-client1.18.0
questionary2.1.1
rasa-sdk3.20.5
redis8.0.1
referencing0.37.0
regex2026.9.29
requests2.34.2
requests-toolbelt1.0.0
rich14.2.0
rpds-py2026.9.1
ruamel-yaml0.19.1
s3transfer0.19.3
sanic25.12.1
sanic-jwt1.8.0
sanic-openapi21.12.0
sanic-routing23.12.0
scikit-learn1.7.2
scipy1.16.3
sentry-sdk2.63.0
simple-websocket1.1.0
six1.17.0
sniffio1.3.1
sqlalchemy2.0.57
sse-starlette3.6.0
starlette1.3.1
structlog26.1.0
structlog-sentry2.2.1
tarsafe0.0.5
tenacity9.1.4
terminaltables3.1.10
threadpoolctl3.7.0
tiktoken0.13.0
tokenizers0.23.3
tomlkit0.15.2
toolz1.2.0
tqdm4.67.3
tracerite2.6.5
truststore0.10.5
types-cachetools7.0.0.20260713
types-protobuf7.35.1.20260906
types-requests2.33.0.20261030
typing-extensions4.16.0
typing-inspection0.4.5
typing-utils0.1.0
tzlocal5.4.5
ujson5.13.0
urllib32.8.0
uvicorn0.54.0
uvloop0.23.0
wcwidth0.9.4
websockets15.0.1
werkzeug3.1.9
wsproto1.3.2
yarl1.25.1
zipp4.1.2
pip25.1.1
pip26.3
poetry-core2.5.0
setuptools83.0.0
wheel0.48.0
~ip25.1.1

Versions500

Raw data

capture
5.2 MB
records
651,521
bytes per record
7.9

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-import success · Generated 2026-11-04 · run ce22b067-2bdc-4819-a06d-d0671fd1eb1f

analysis 0.1.0 · 2026-11-04 · 5e67feb · graph v2