Safety CI > CloudHeads/lambda

pyup-update-tox-2.9.1-to-3.2.0

8 years ago

efe0182b

Update tox from 2.9.1 to 3.2.0

No dependencies with known security vulnerabilities.

pyup-update-boto3-1.4.8-to-1.7.74

8 years ago

cb5fb942

Update boto3 from 1.4.8 to 1.7.74

No dependencies with known security vulnerabilities.

pyup-update-boto3-1.4.8-to-1.7.73

8 years ago

741d0883

Update boto3 from 1.4.8 to 1.7.73

No dependencies with known security vulnerabilities.

pyup-update-boto3-1.4.8-to-1.7.72

8 years ago

6d5ae3e8

Update boto3 from 1.4.8 to 1.7.72

No dependencies with known security vulnerabilities.

pyup-update-boto3-1.4.8-to-1.7.71

8 years ago

15863dad

Update boto3 from 1.4.8 to 1.7.71

No dependencies with known security vulnerabilities.

pyup-update-boto3-1.4.8-to-1.7.70

8 years, 1 month ago

af53ba90

Update boto3 from 1.4.8 to 1.7.70

No dependencies with known security vulnerabilities.

pyup-update-boto3-1.4.8-to-1.7.69

8 years, 1 month ago

4eeadaf5

Update boto3 from 1.4.8 to 1.7.69

No dependencies with known security vulnerabilities.

pyup-update-pytest-3.3.1-to-3.7.1

8 years, 1 month ago

f91718ed

Update pytest from 3.3.1 to 3.7.1

No dependencies with known security vulnerabilities.

pyup-update-boto3-1.4.8-to-1.7.68

8 years, 1 month ago

1545a826

Update boto3 from 1.4.8 to 1.7.68

No dependencies with known security vulnerabilities.

pyup-update-boto3-1.4.8-to-1.7.67

8 years, 1 month ago

161e8afa

Update boto3 from 1.4.8 to 1.7.67

No dependencies with known security vulnerabilities.

pyup-update-pytest-3.3.1-to-3.7.0

8 years, 1 month ago

13e00940

Update pytest from 3.3.1 to 3.7.0

PyYAML 3.12 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.12

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.12

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-update-boto3-1.4.8-to-1.7.66

8 years, 1 month ago

fe8f4213

Update boto3 from 1.4.8 to 1.7.66

PyYAML 3.12 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.12

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.12

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-update-pytest-3.3.1-to-3.6.4

8 years, 1 month ago

2ceb05a8

Update pytest from 3.3.1 to 3.6.4

PyYAML 3.12 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.12

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.12

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-update-boto3-1.4.8-to-1.7.65

8 years, 1 month ago

5718e480

Update boto3 from 1.4.8 to 1.7.65

PyYAML 3.12 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.12

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.12

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-update-boto3-1.4.8-to-1.7.64

8 years, 1 month ago

98328755

Update boto3 from 1.4.8 to 1.7.64

PyYAML 3.12 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.12

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.12

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

CloudHeads/lambda_utils