Safety CI > AhmadZakaria/ScotlandPYard

pyup-scheduled-update-2021-01-01

5 years ago

dc5234d3

Update watchdog from 0.10.3 to 1.0.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-01-01

5 years ago

c1ad1c98

Update virtualenv from 20.0.31 to 20.2.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-01-01

5 years ago

de6751a7

Update urllib3 from 1.25.10 to 1.26.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-01-01

5 years ago

7ae95468

Update tox from 3.20.0 to 3.20.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-01-01

5 years ago

cb053150

Update sphinx from 3.2.1 to 3.4.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-01-01

5 years ago

9ef4ba01

Update sip from 5.4.0 to 5.5.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-01-01

5 years ago

8e9c7b4b

Update setuptools from 50.3.0 to 51.1.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-01-01

5 years ago

ae1ec543

Update scipy from 1.5.2 to 1.6.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-01-01

5 years ago

c5377c28

Update requests from 2.24.0 to 2.25.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-01-01

5 years ago

48a92e18

Update pytz from 2020.1 to 2020.5

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-01-01

5 years ago

54c5ee99

Update pytest from 6.1.0 to 6.2.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-01-01

5 years ago

bebe7002

Update pygments from 2.7.1 to 2.7.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-01-01

5 years ago

ad474d30

Update py from 1.9.0 to 1.10.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-01-01

5 years ago

8cf68527

Update numpy from 1.19.2 to 1.19.4

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-scheduled-update-2021-01-01

5 years ago

99b717cf

Update matplotlib from 3.3.2 to 3.3.3

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.