Safety CI > Hugovdberg/PIconnect

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

7a8d748e

Update pytest from 6.2.5 to 7.1.3

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

70b4e08f

Update pytest-cov from 3.0.0 to 4.0.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

1117438d

Update pyparsing from 3.0.6 to 3.0.9

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

530958f2

Update pylint from 2.12.2 to 2.15.4

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

f5fe3fb5

Update pygments from 2.10.0 to 2.13.0

pylint 2.12.2 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.12.2	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

fca5e9b7

Update pycodestyle from 2.8.0 to 2.9.1

pylint 2.12.2 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.12.2	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

264bbca8

Update pyflakes from 2.4.0 to 2.5.0

pylint 2.12.2 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.12.2	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

ed249a29

Update platformdirs from 2.4.0 to 2.5.2

pylint 2.12.2 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.12.2	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

f748483f

Update pkginfo from 1.8.2 to 1.8.3

pylint 2.12.2 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.12.2	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

34ec5027

Update pbr from 5.8.0 to 5.10.0

pylint 2.12.2 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.12.2	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

74062949

Update pathspec from 0.9.0 to 0.10.1

pylint 2.12.2 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.12.2	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

79aade28

Update pandas from 1.3.5 to 1.5.0

pylint 2.12.2 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.12.2	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

ddecfea5

Update mccabe from 0.6.1 to 0.7.0

numpy 1.21.4 and pylint 2.12.2 have known security vulnerabilities.

Package	Installed	Affected	Info
numpy	1.21.4	<1.22.0	show Numpy 1.22.0 includes a fix for CVE-2021-41496: Buffer overflow in the array_from_pyobj function of fortranobject.c, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally). https://github.com/numpy/numpy/issues/19000
numpy	1.21.4	<1.22.0	show Numpy 1.22.0 includes a fix for CVE-2021-34141: An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless." https://github.com/numpy/numpy/issues/18993
numpy	1.21.4	<1.22.2	show Numpy 1.22.2 includes a fix for CVE-2021-41495: Null Pointer Dereference vulnerability exists in numpy.sort in NumPy in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place. NOTE2: The specs we include in this advisory differ from the publicly available on other sources. For example, the advisory posted by the NVD indicate that versions up to and including 1.19.0 are affected. However, research by Safety CLI Cybersecurity confirms that the vulnerability remained unaddressed until version 1.22.2.
pylint	2.12.2	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

02667b4b

Update numpy from 1.21.4 to 1.23.4

pylint 2.12.2 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.12.2	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup/scheduled-update-2022-10-17

3 years, 1 month ago

a9e36164

Update markupsafe from 2.0.1 to 2.1.1

numpy 1.21.4 and pylint 2.12.2 have known security vulnerabilities.

Package	Installed	Affected	Info
numpy	1.21.4	<1.22.0	show Numpy 1.22.0 includes a fix for CVE-2021-41496: Buffer overflow in the array_from_pyobj function of fortranobject.c, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally). https://github.com/numpy/numpy/issues/19000
numpy	1.21.4	<1.22.0	show Numpy 1.22.0 includes a fix for CVE-2021-34141: An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless." https://github.com/numpy/numpy/issues/18993
numpy	1.21.4	<1.22.2	show Numpy 1.22.2 includes a fix for CVE-2021-41495: Null Pointer Dereference vulnerability exists in numpy.sort in NumPy in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place. NOTE2: The specs we include in this advisory differ from the publicly available on other sources. For example, the advisory posted by the NVD indicate that versions up to and including 1.19.0 are affected. However, research by Safety CLI Cybersecurity confirms that the vulnerability remained unaddressed until version 1.22.2.
pylint	2.12.2	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322