Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

pipenv check returns "Unable to load vulnerability database"

See original GitHub issue

I’m using pipenv version 2018.11.26, and running pipenv check returns the following:

Checking PEP 508 requirements…
Passed!
Checking installed package safety…
An error occurred:
Unable to load vulnerability database

It seems that this has happened in the past – I did some googling and stumbled across this old issue: https://github.com/pypa/pipenv/issues/3826

When I first started noticing the error, https://pyup.io/ was returning HTTP 500 for their homepage. But now it’s back up and running, and pipenv is still giving errors. pipenv check --verbose doesn’t show any extra information, so I’m not sure what’s wrong.

On another note, might it be possible to add a flag to pipenv check to only do the PEP 508 checks and skip the security checks for times like this?

Issue Analytics

State:
Created 4 years ago
Reactions:4
Comments:9 (3 by maintainers)

Top GitHub Comments

3reactions

mcallaghan-bsmcommented, Jul 19, 2019

Note pyup.io is intermittently giving HTTP 500. (Just tried and it was fine same as OP, but subsequently it returned error)

2reactions

pcraciunoiucommented, Jul 20, 2019

Still fails for me consistently and has been most of this week.

Top Results From Across the Web

Where does Pipenv get their CVE data from?

Pipenv appears to include a patched version of the safety library directly in its source tree. safety uses its own open-source vulnerability ......

Advanced Usage of Pipenv - Read the Docs

Pipenv makes an API call to retrieve those results and use them each time you run pipenv check to show you vulnerable dependencies....

safety

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected. Safety can be run on ...

pipenv Documentation

Pipenv makes an API call to retrieve those results and use them each time you run pipenv check to show you vulnerable dependencies....

Advanced Usage of Pipenv — pipenv 7.7.9 documentation

$ cat Pipfile [packages] django = "==1.10.1" $ pipenv check Checking PEP 508 requirements… Passed! Checking installed package safety… 33075: django >=1.10,<1.10 ...