Safety CI > Geologik/plateypus-app

master

5 years, 8 months ago

64035705

Merge pull request #189 from Geologik/pyup-update-click-7.1.1-to-7.1.2 pyup Update click to 7.1.2

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

b7699428

Merge pull request #187 from Geologik/pyup-update-astroid-2.3.3-to-2.4.0 pyup Update astroid to 2.4

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

7c5b9a4a

Merge pull request #188 from Geologik/pyup-update-pylint-2.4.4-to-2.5.0 pyup Update pylint to 2.5.0

No dependencies with known security vulnerabilities.

pyup-update-click-7.1.1-to-7.1.2

5 years, 8 months ago

0b3a0b2d

Update click from 7.1.1 to 7.1.2

pylint 2.4.4 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.4.4	<2.5.0	show Pylint 2.5.0 no longer allows ``python -m pylint ...`` to import user code. Previously, it added the current working directory as the first element of ``sys.path``. This opened up a potential security hole where ``pylint`` would import user level code as long as that code resided in modules having the same name as stdlib or pylint's own modules.
pylint	2.4.4	>=0,<2.6.1	show Pylint before 2.6.1 is susceptible to a Regular Expression Denial of Service (ReDoS) vulnerability due to issues in its pyreverse component. This issue arises from certain regular expressions in pyreverse that can be exploited by causing catastrophic backtracking, significantly slowing down the service by forcing it to take a disproportionate amount of time to process inputs. This vulnerability allows attackers to use specially crafted inputs that increase the processing time exponentially, potentially leading to a service becoming inaccessible to legitimate users. https://github.com/pylint-dev/pylint/commit/5405dd5115d598fa69e49538d50ec79202b1b52e
pylint	2.4.4	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
pylint	2.4.4	<2.7.0	show Pylint 2.7.0 includes a fix for vulnerable regular expressions in 'pyreverse'. https://github.com/pylint-dev/pylint/commit/5405dd5115d598fa69e49538d50ec79202b1b52e

master

5 years, 8 months ago

7a95f374

Merge pull request #186 from Geologik/pyup-update-cython-0.29.16-to-0.29.17 pyup Update cython to 0

pylint 2.4.4 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.4.4	<2.5.0	show Pylint 2.5.0 no longer allows ``python -m pylint ...`` to import user code. Previously, it added the current working directory as the first element of ``sys.path``. This opened up a potential security hole where ``pylint`` would import user level code as long as that code resided in modules having the same name as stdlib or pylint's own modules.
pylint	2.4.4	>=0,<2.6.1	show Pylint before 2.6.1 is susceptible to a Regular Expression Denial of Service (ReDoS) vulnerability due to issues in its pyreverse component. This issue arises from certain regular expressions in pyreverse that can be exploited by causing catastrophic backtracking, significantly slowing down the service by forcing it to take a disproportionate amount of time to process inputs. This vulnerability allows attackers to use specially crafted inputs that increase the processing time exponentially, potentially leading to a service becoming inaccessible to legitimate users. https://github.com/pylint-dev/pylint/commit/5405dd5115d598fa69e49538d50ec79202b1b52e
pylint	2.4.4	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
pylint	2.4.4	<2.7.0	show Pylint 2.7.0 includes a fix for vulnerable regular expressions in 'pyreverse'. https://github.com/pylint-dev/pylint/commit/5405dd5115d598fa69e49538d50ec79202b1b52e

pyup-update-pylint-2.4.4-to-2.5.0

5 years, 8 months ago

ae27743a

Update pylint from 2.4.4 to 2.5.0

No dependencies with known security vulnerabilities.

pyup-update-astroid-2.3.3-to-2.4.0

5 years, 8 months ago

9d48273d

Update astroid from 2.3.3 to 2.4.0

No dependencies with known security vulnerabilities.

pyup-update-cython-0.29.16-to-0.29.17

5 years, 8 months ago

993435e2

Update cython from 0.29.16 to 0.29.17

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

4fcc5ca7

Merge pull request #178 from Geologik/pyup-update-pyparsing-2.4.6-to-2.4.7 pyup Update pyparsing to

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

fbdd6aa1

Merge pull request #179 from Geologik/pyup-update-pbr-5.4.4-to-5.4.5 pyup Update pbr to 5.4.5

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

84e27de3

Merge pull request #180 from Geologik/pyup-update-gitpython-3.1.0-to-3.1.1 pyup Update gitpython to

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

0f4c406f

Merge pull request #181 from Geologik/pyup-update-coverage-5.0.4-to-5.1 pyup Update coverage to 5.1

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

41fc9cd3

Merge pull request #182 from Geologik/pyup-update-parso-0.6.2-to-0.7.0 pyup Update parso to 0.7.0

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

9a018a36

Merge pull request #183 from Geologik/pyup-update-jedi-0.16.0-to-0.17.0 pyup Update jedi to 0.17.0

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

3183d12d

Merge pull request #184 from Geologik/pyup-update-urllib3-1.25.8-to-1.25.9 pyup Update urllib3 to 1

No dependencies with known security vulnerabilities.