Safety CI > AhmadZakaria/ScotlandPYard

pyup-scheduled-update-2021-12-01

4 years ago

e576c361

Update setuptools from 50.3.0 to 59.4.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-12-01

4 years ago

06f31943

Update scipy from 1.5.2 to 1.7.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-12-01

4 years ago

1fc52183

Update requests from 2.24.0 to 2.26.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-12-01

4 years ago

6d3a39df

Update pytz from 2020.1 to 2021.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-12-01

4 years ago

984e2fc8

Update python-dateutil from 2.8.1 to 2.8.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-12-01

4 years ago

29d0e9ec

Update pytest-runner from 5.2 to 5.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-12-01

4 years ago

2bc22216

Update pytest from 6.1.0 to 6.2.5

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-12-01

4 years ago

d33054f8

Update pyqt5 from 5.13.0 to 5.15.6

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-12-01

4 years ago

c7ffc8e9

Update pyparsing from 2.4.7 to 3.0.6

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-12-01

4 years ago

fca07e88

Update pygments from 2.7.1 to 2.10.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-12-01

4 years ago

101bb25b

Update pyflakes from 2.2.0 to 2.4.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-12-01

4 years ago

bb0a1510

Update pycparser from 2.20 to 2.21

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-12-01

4 years ago

840522c6

Update pycodestyle from 2.6.0 to 2.8.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-12-01

4 years ago

8dd655b5

Update pluggy from 0.13.1 to 1.0.0

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-scheduled-update-2021-12-01

4 years ago

82f9a9f5

Update numpy from 1.19.2 to 1.21.4

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.