Safety CI > AhmadZakaria/ScotlandPYard

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

792f6327

Update sip from 5.4.0 to 6.1.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

ef92fdf1

Update setuptools from 50.3.0 to 57.4.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

37b00474

Update scipy from 1.5.2 to 1.7.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

48aa93dd

Update requests from 2.24.0 to 2.26.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

4e0db2d6

Update pytz from 2020.1 to 2021.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

9cc613a4

Update python-dateutil from 2.8.1 to 2.8.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

2fe5fc53

Update pytest-runner from 5.2 to 5.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

3d57f971

Update pytest from 6.1.0 to 6.2.5

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

ba53ccbb

Update pygments from 2.7.1 to 2.10.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

60867cf7

Update pyflakes from 2.2.0 to 2.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

51d48b06

Update pycodestyle from 2.6.0 to 2.7.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

6a19ed17

Update py from 1.9.0 to 1.10.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

86f344a4

Update pluggy from 0.13.1 to 1.0.0

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

662c98ae

Update numpy from 1.19.2 to 1.21.2

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-scheduled-update-2021-09-01

4 years, 4 months ago

d218d8da

Update networkx from 2.5 to 2.6.2

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.