Safety CI > FJNR-inc/Blitz-API

pyup-update-awscli-1.44.62-to-1.44.68

1 month, 2 weeks ago

fc8fe9c8

Update awscli from 1.44.62 to 1.44.68

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

renovate/awscli-1.x

1 month, 2 weeks ago

851e29f5

Update dependency awscli to v1.44.68

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-awscli-1.44.62-to-1.44.67

1 month, 2 weeks ago

4b2011c8

Update awscli from 1.44.62 to 1.44.67

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

renovate/awscli-1.x

1 month, 2 weeks ago

15ea9f42

Update dependency awscli to v1.44.67

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-celery-5.6.2-to-5.6.3

1 month, 2 weeks ago

35da4970

Update celery from 5.6.2 to 5.6.3