Safety CI > GilbertoAbrao/libpythonpro

pyup-update-pytest-6.1.1-to-6.2.0

4 years, 6 months ago

Update pytest from 6.1.1 to 6.2.0

py 1.9.0 and py 1.9.0 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-py-1.9.0-to-1.10.0

4 years, 6 months ago

2d33c12b

Update py from 1.9.0 to 1.10.0

No dependencies with known security vulnerabilities.

pyup-update-py-1.9.0-to-1.10.0

4 years, 6 months ago

856a942d

Update py from 1.9.0 to 1.10.0

py 1.9.0 has known security vulnerabilities.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-packaging-20.4-to-20.8

4 years, 6 months ago

7cbf798a

Update packaging from 20.4 to 20.8

py 1.9.0 and py 1.9.0 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-chardet-3.0.4-to-4.0.0

4 years, 6 months ago

0260fe36

Update chardet from 3.0.4 to 4.0.0

No dependencies with known security vulnerabilities.

pyup-update-certifi-2020.6.20-to-2020.12.5

4 years, 7 months ago

297deaed

Update certifi from 2020.6.20 to 2020.12.5

No dependencies with known security vulnerabilities.

pyup-update-packaging-20.4-to-20.7

4 years, 7 months ago

870f46a5

Update packaging from 20.4 to 20.7

No dependencies with known security vulnerabilities.

pyup-update-packaging-20.4-to-20.5

4 years, 7 months ago

5857b802

Update packaging from 20.4 to 20.5

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.25.10-to-1.26.2

4 years, 7 months ago

424bc348

Update urllib3 from 1.25.10 to 1.26.2

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.25.10-to-1.26.1

4 years, 7 months ago

c3412109

Update urllib3 from 1.25.10 to 1.26.1

No dependencies with known security vulnerabilities.

pyup-update-requests-2.24.0-to-2.25.0

4 years, 7 months ago

af4046c6

Update requests from 2.24.0 to 2.25.0

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.25.10-to-1.26.0

4 years, 7 months ago

54c6dd96

Update urllib3 from 1.25.10 to 1.26.0

No dependencies with known security vulnerabilities.

pyup-update-certifi-2020.6.20-to-2020.11.8

4 years, 7 months ago

17c62a6c

Update certifi from 2020.6.20 to 2020.11.8

No dependencies with known security vulnerabilities.

pyup-update-attrs-20.2.0-to-20.3.0

4 years, 8 months ago

b52c41d1

Update attrs from 20.2.0 to 20.3.0

No dependencies with known security vulnerabilities.

pyup-update-attrs-20.2.0-to-20.3.0

4 years, 8 months ago

27817765

Update attrs from 20.2.0 to 20.3.0

No dependencies with known security vulnerabilities.