Safety CI > Hugovdberg/PIconnect

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

3bce78f3

Update tomlkit from 0.11.6 to 0.12.1

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

59337e1e

Pin pandas to latest version 2.1.1

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

5a6c15fe

Update sphinxcontrib-serializinghtml from 1.1.5 to 1.1.9

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

231b9942

Update stevedore from 4.1.1 to 5.1.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

99e6a873

Update sphinxcontrib-htmlhelp from 2.0.1 to 2.0.4

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

70abe1a3

Update sphinxcontrib-qthelp from 1.0.3 to 1.0.6

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

9f781501

Update sphinxcontrib-devhelp from 1.0.2 to 1.0.5

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

fab1feb4

Update sphinxcontrib-applehelp from 1.0.4 to 1.0.7

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

329bce9f

Update sphinx from 6.1.3 to 7.2.6

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

2b36e1c6

Update requests-toolbelt from 0.10.1 to 1.0.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

b477df73

Update setuptools from 67.2.0 to 68.2.2

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

fad2324a

Update rich from 13.3.1 to 13.6.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

09c4dbdc

Update requests from 2.28.2 to 2.31.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

96c6d3cd

Update readme-renderer from 37.3 to 42.0

requests 2.28.2 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.28.2	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.28.2	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.28.2	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

Package

Installed

Affected

Info

requests

2.28.2

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

requests

2.28.2

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

requests

2.28.2

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

pyup/scheduled-update-2023-10-02

2 years, 1 month ago

11df726f

Update pytest-cov from 4.0.0 to 4.1.0

requests 2.28.2 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.28.2	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.28.2	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.28.2	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

Package

Installed

Affected

Info

requests

2.28.2

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

requests

2.28.2

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

requests

2.28.2

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.