Safety CI > AJOliveiraRN/libpythonpro

pyup-update-requests-2.24.0-to-2.25.1

5 years ago

4eca76e4

Update requests from 2.24.0 to 2.25.1

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-pytest-6.0.1-to-6.2.1

5 years ago

25cf971a

Update pytest from 6.0.1 to 6.2.1

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-pytest-6.0.1-to-6.2.0

5 years ago

f01ce6d5

Update pytest from 6.0.1 to 6.2.0

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-py-1.9.0-to-1.10.0

5 years ago

02cc8ff4

Update py from 1.9.0 to 1.10.0

No dependencies with known security vulnerabilities.

pyup-update-packaging-20.4-to-20.8

5 years ago

7de63ed8

Update packaging from 20.4 to 20.8

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-chardet-3.0.4-to-4.0.0

5 years ago

edfd40fe

Update chardet from 3.0.4 to 4.0.0

No dependencies with known security vulnerabilities.

pyup-update-certifi-2020.6.20-to-2020.12.5

5 years ago

b5d0faab

Update certifi from 2020.6.20 to 2020.12.5

No dependencies with known security vulnerabilities.

pyup-update-packaging-20.4-to-20.7

5 years ago

5f94d230

Update packaging from 20.4 to 20.7

No dependencies with known security vulnerabilities.

pyup-update-packaging-20.4-to-20.5

5 years ago

997dfe5f

Update packaging from 20.4 to 20.5

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.25.10-to-1.26.2

5 years, 1 month ago

d17a83bb

Update urllib3 from 1.25.10 to 1.26.2

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.25.10-to-1.26.1

5 years, 1 month ago

eaa38852

Update urllib3 from 1.25.10 to 1.26.1

No dependencies with known security vulnerabilities.

pyup-update-requests-2.24.0-to-2.25.0

5 years, 1 month ago

ceaedf3d

Update requests from 2.24.0 to 2.25.0

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.25.10-to-1.26.0

5 years, 1 month ago

16abe25a

Update urllib3 from 1.25.10 to 1.26.0

No dependencies with known security vulnerabilities.

pyup-update-certifi-2020.6.20-to-2020.11.8

5 years, 1 month ago

88d7fbfe

Update certifi from 2020.6.20 to 2020.11.8

No dependencies with known security vulnerabilities.

pyup-update-attrs-20.1.0-to-20.3.0

5 years, 1 month ago

32f81c48

Update attrs from 20.1.0 to 20.3.0

No dependencies with known security vulnerabilities.