Safety CI > FJNR-inc/Blitz-API

develop

1 month, 1 week ago

38b72900

Merge pull request #3225 from FJNR-inc/renovate/pillow-12.x Update dependency Pillow to v12.2.0

No dependencies with known security vulnerabilities.

renovate/pillow-12.x

1 month, 1 week ago

7fcbb691

Update dependency Pillow to v12.2.0

No dependencies with known security vulnerabilities.

pyup-update-pillow-12.1.1-to-12.2.0

1 month, 1 week ago

e419f2a9

Update pillow from 12.1.1 to 12.2.0

No dependencies with known security vulnerabilities.

develop

1 month, 1 week ago

c23aadc8

Merge pull request #3209 from FJNR-inc/renovate/djangorestframework-3.x Update dependency djangores

No dependencies with known security vulnerabilities.

develop

1 month, 1 week ago

2afc2b51

Merge pull request #3206 from FJNR-inc/renovate/google-cloud-storage-3.x Update dependency google-c

No dependencies with known security vulnerabilities.

develop

1 month, 1 week ago

35fd26e1

Merge pull request #3212 from FJNR-inc/renovate/requests-2.x Update dependency requests to v2.33.1

No dependencies with known security vulnerabilities.

develop

1 month, 1 week ago

9b5d879d

Merge pull request #3215 from FJNR-inc/renovate/celery-5.x Update dependency celery to v5.6.3

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-awscli-1.44.62-to-1.44.70

1 month, 1 week ago

53921ec1

Update awscli from 1.44.62 to 1.44.70

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

renovate/awscli-1.x

1 month, 1 week ago

223686c2

Update dependency awscli to v1.44.70

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-awscli-1.44.62-to-1.44.69

1 month, 1 week ago

30553948

Update awscli from 1.44.62 to 1.44.69

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-requests-2.32.5-to-2.33.1

1 month, 1 week ago

b4ca23fb

Update requests from 2.32.5 to 2.33.1

No dependencies with known security vulnerabilities.

renovate/awscli-1.x

1 month, 1 week ago

27aaf7f9

Update dependency awscli to v1.44.69

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

renovate/requests-2.x

1 month, 1 week ago

1c8b026a

Update dependency requests to v2.33.1

No dependencies with known security vulnerabilities.

renovate/pygments-2.x

1 month, 2 weeks ago

b9c55d78

Update dependency Pygments to v2.20.0

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-pygments-2.19.2-to-2.20.0

1 month, 2 weeks ago

7b1004ce

Update pygments from 2.19.2 to 2.20.0

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.