Safety CI > Geologik/plateypus-app

master

5 years, 9 months ago

512c7929

Merge pull request #173 from Geologik/pyup-update-pyyaml-5.3-to-5.3.1 pyup Update pyyaml to 5.3.1

No dependencies with known security vulnerabilities.

master

5 years, 9 months ago

089b7aa3

Merge pull request #175 from Geologik/pyup-update-cython-0.29.15-to-0.29.16 pyup Update cython to 0

pyyaml 5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pyyaml	5.3	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
pyyaml	5.3	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

pyyaml

5.3

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyyaml

5.3

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

pyup-update-cython-0.29.15-to-0.29.16

5 years, 9 months ago

513624ba

Update cython from 0.29.15 to 0.29.16

No dependencies with known security vulnerabilities.

pyup-update-wcwidth-0.1.8-to-0.1.9

5 years, 9 months ago

d31c0586

Update wcwidth from 0.1.8 to 0.1.9

No dependencies with known security vulnerabilities.

pyup-update-pyyaml-5.3-to-5.3.1

5 years, 10 months ago

3efeaa56

Update pyyaml from 5.3 to 5.3.1

No dependencies with known security vulnerabilities.

pyup-update-coverage-5.0.3-to-5.0.4

5 years, 10 months ago

d7eda8cd

Update coverage from 5.0.3 to 5.0.4

No dependencies with known security vulnerabilities.

pyup-update-pytest-5.3.5-to-5.4.1

5 years, 10 months ago

c1129169

Update pytest from 5.3.5 to 5.4.1

No dependencies with known security vulnerabilities.

pyup-update-pytest-5.3.5-to-5.4.0

5 years, 10 months ago

3f29215d

Update pytest from 5.3.5 to 5.4.0

No dependencies with known security vulnerabilities.

master

5 years, 10 months ago

2360958f

Merge pull request #166 from Geologik/pyup-update-pygments-2.5.2-to-2.6.1 pyup Update pygments to 2

No dependencies with known security vulnerabilities.

master

5 years, 10 months ago

bf6a27ef

Merge pull request #167 from Geologik/pyup-update-wrapt-1.12.0-to-1.12.1 pyup Update wrapt to 1.12.

No dependencies with known security vulnerabilities.

master

5 years, 10 months ago

8beb7bcf

Merge pull request #169 from Geologik/pyup-update-click-7.0-to-7.1.1 pyup Update click to 7.1.1

No dependencies with known security vulnerabilities.

pyup-update-click-7.0-to-7.1.1

5 years, 10 months ago

2f501d01

Update click from 7.0 to 7.1.1

No dependencies with known security vulnerabilities.

pyup-update-click-7.0-to-7.1

5 years, 10 months ago

45e51252

Update click from 7.0 to 7.1

No dependencies with known security vulnerabilities.

pyup-update-wrapt-1.12.0-to-1.12.1

5 years, 10 months ago

fddffe12

Update wrapt from 1.12.0 to 1.12.1

No dependencies with known security vulnerabilities.

pyup-update-pygments-2.5.2-to-2.6.1

5 years, 10 months ago

7fd0faec

Update pygments from 2.5.2 to 2.6.1

No dependencies with known security vulnerabilities.