Safety CI > DLR-SC/prov2bigchaindb

pyup-pin-networkx-3.3

1 month, 2 weeks ago

a52c67fb

Pin networkx to latest version 3.3

BigchainDB 1.3.0 and bigchaindb-driver 0.4.1 have known security vulnerabilities.

Package	Installed	Affected	Info
BigchainDB	1.3.0	<2.2.2	show Bigchaindb 2.2.2 updates its dependency 'pyyaml' to v5.3.1 to include a security fix.
BigchainDB	1.3.0	<2.2.2	show Bigchaindb 2.2.2 updates its dependency 'gunicorn' to v20.0.4 to include a security fix.
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

BigchainDB

1.3.0

<2.2.2

show

Bigchaindb 2.2.2 updates its dependency 'pyyaml' to v5.3.1 to include a security fix.

BigchainDB

1.3.0

<2.2.2

show

Bigchaindb 2.2.2 updates its dependency 'gunicorn' to v20.0.4 to include a security fix.

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-networkx-3.2.1

6 months, 3 weeks ago

b010ce73

Pin networkx to latest version 3.2.1

BigchainDB 1.3.0 and bigchaindb-driver 0.4.1 have known security vulnerabilities.

Package	Installed	Affected	Info
BigchainDB	1.3.0	<2.2.2	show Bigchaindb 2.2.2 updates its dependency 'pyyaml' to v5.3.1 to include a security fix.
BigchainDB	1.3.0	<2.2.2	show Bigchaindb 2.2.2 updates its dependency 'gunicorn' to v20.0.4 to include a security fix.
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

BigchainDB

1.3.0

<2.2.2

show

Bigchaindb 2.2.2 updates its dependency 'pyyaml' to v5.3.1 to include a security fix.

BigchainDB

1.3.0

<2.2.2

show

Bigchaindb 2.2.2 updates its dependency 'gunicorn' to v20.0.4 to include a security fix.

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-networkx-3.2

7 months ago

45ca9d7b

Pin networkx to latest version 3.2

BigchainDB 1.3.0 and bigchaindb-driver 0.4.1 have known security vulnerabilities.

Package	Installed	Affected	Info
BigchainDB	1.3.0	<2.2.2	show Bigchaindb 2.2.2 updates its dependency 'pyyaml' to v5.3.1 to include a security fix.
BigchainDB	1.3.0	<2.2.2	show Bigchaindb 2.2.2 updates its dependency 'gunicorn' to v20.0.4 to include a security fix.
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

BigchainDB

1.3.0

<2.2.2

show

Bigchaindb 2.2.2 updates its dependency 'pyyaml' to v5.3.1 to include a security fix.

BigchainDB

1.3.0

<2.2.2

show

Bigchaindb 2.2.2 updates its dependency 'gunicorn' to v20.0.4 to include a security fix.

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-networkx-3.1

1 year, 1 month ago

322aad25

Pin networkx to latest version 3.1

BigchainDB 1.3.0 and bigchaindb-driver 0.4.1 have known security vulnerabilities.

Package	Installed	Affected	Info
BigchainDB	1.3.0	<2.2.2	show Bigchaindb 2.2.2 updates its dependency 'pyyaml' to v5.3.1 to include a security fix.
BigchainDB	1.3.0	<2.2.2	show Bigchaindb 2.2.2 updates its dependency 'gunicorn' to v20.0.4 to include a security fix.
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

BigchainDB

1.3.0

<2.2.2

show

Bigchaindb 2.2.2 updates its dependency 'pyyaml' to v5.3.1 to include a security fix.

BigchainDB

1.3.0

<2.2.2

show

Bigchaindb 2.2.2 updates its dependency 'gunicorn' to v20.0.4 to include a security fix.

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-prov-2.0.0

3 years, 6 months ago

894461ad

Pin prov to latest version 2.0.0

BigchainDB 1.3.0 and bigchaindb-driver 0.4.1 have known security vulnerabilities.

Package	Installed	Affected	Info
BigchainDB	1.3.0	<2.2.2	show Bigchaindb 2.2.2 updates its dependency 'pyyaml' to v5.3.1 to include a security fix.
BigchainDB	1.3.0	<2.2.2	show Bigchaindb 2.2.2 updates its dependency 'gunicorn' to v20.0.4 to include a security fix.
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

BigchainDB

1.3.0

<2.2.2

show

Bigchaindb 2.2.2 updates its dependency 'pyyaml' to v5.3.1 to include a security fix.

BigchainDB

1.3.0

<2.2.2

show

Bigchaindb 2.2.2 updates its dependency 'gunicorn' to v20.0.4 to include a security fix.

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-bigchaindb-2.2.2

3 years, 7 months ago

7523bd53

Pin bigchaindb to latest version 2.2.2

bigchaindb-driver 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-bigchaindb-2.2.1

4 years, 1 month ago

5edd50a4

Pin bigchaindb to latest version 2.2.1

bigchaindb-driver 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-bigchaindb-2.1.0

4 years, 3 months ago

9e89fe51

Pin bigchaindb to latest version 2.1.0

bigchaindb-driver 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-networkx-2.4

4 years, 7 months ago

1ad178e8

Pin networkx to latest version 2.4

bigchaindb-driver 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-networkx-2.3

5 years, 1 month ago

4a3289f4

Pin networkx to latest version 2.3

bigchaindb-driver 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-prov-1.5.3

5 years, 6 months ago

66eb2b31

Pin prov to latest version 1.5.3

bigchaindb-driver 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-bigchaindb-driver-0.6.2

5 years, 6 months ago

ca29f103

Pin bigchaindb-driver to latest version 0.6.2

No dependencies with known security vulnerabilities.

pyup-pin-bigchaindb-driver-0.6.1

5 years, 7 months ago

c9fd49b9

Pin bigchaindb-driver to latest version 0.6.1

No dependencies with known security vulnerabilities.

pyup-pin-bigchaindb-driver-0.6.0

5 years, 7 months ago

f08e0213

Pin bigchaindb-driver to latest version 0.6.0

No dependencies with known security vulnerabilities.

pyup-pin-networkx-2.2

5 years, 8 months ago

2308e6fc

Pin networkx to latest version 2.2

bigchaindb-driver 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.