Safety CI > JeffValenti/SME

pyup/scheduled-update-2023-12-03

1 year, 8 months ago

Update pytest-cov from 4.0.0 to 4.1.0

scipy 1.9.3 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup/scheduled-update-2023-12-03

1 year, 8 months ago

93ccf8dd

Update pip from 22.3.1 to 23.3.1

scipy 1.9.3 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup/scheduled-update-2023-12-03

1 year, 8 months ago

1e455db0

Update flake8 from 6.0.0 to 6.1.0

pip 22.3.1 and scipy 1.9.3 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	22.3.1	<23.3	show Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.
pip	22.3.1	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

22.3.1

<23.3

show

Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.

pip

22.3.1

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

pyup/scheduled-update-2023-12-03

1 year, 8 months ago

e26e7d04

Update cython from 0.29.32 to 3.0.6

pip 22.3.1 and scipy 1.9.3 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	22.3.1	<23.3	show Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.
pip	22.3.1	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

22.3.1

<23.3

show

Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.

pip

22.3.1

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

pyup/scheduled-update-2023-12-03

1 year, 8 months ago

b5ed80c3

Update coverage from 6.5.0 to 7.3.2

pip 22.3.1 and scipy 1.9.3 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	22.3.1	<23.3	show Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.
pip	22.3.1	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

22.3.1

<23.3

show

Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.

pip

22.3.1

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

pyup/scheduled-update-2023-12-03

1 year, 8 months ago

86e81c7b

Update astropy from 5.1.1 to 6.0.0

pip 22.3.1 and scipy 1.9.3 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	22.3.1	<23.3	show Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.
pip	22.3.1	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

22.3.1

<23.3

show

Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.

pip

22.3.1

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

pyup/scheduled-update-2023-11-26

1 year, 8 months ago

4a6de8ea

Update scipy from 1.9.3 to 1.11.4

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-11-26

1 year, 8 months ago

3ebc255a

Update pytest-cov from 4.0.0 to 4.1.0

scipy 1.9.3 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup/scheduled-update-2023-11-26

1 year, 8 months ago

23909dfe

Update pip from 22.3.1 to 23.3.1

scipy 1.9.3 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup/scheduled-update-2023-11-26

1 year, 8 months ago

20b619f1

Update cython from 0.29.32 to 3.0.5

pip 22.3.1 and scipy 1.9.3 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	22.3.1	<23.3	show Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.
pip	22.3.1	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

22.3.1

<23.3

show

Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.

pip

22.3.1

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

pyup/scheduled-update-2023-11-26

1 year, 8 months ago

1358e52b

Update flake8 from 6.0.0 to 6.1.0

pip 22.3.1 and scipy 1.9.3 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	22.3.1	<23.3	show Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.
pip	22.3.1	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

22.3.1

<23.3

show

Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.

pip

22.3.1

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

pyup/scheduled-update-2023-11-26

1 year, 8 months ago

ea2808c9

Update coverage from 6.5.0 to 7.3.2

pip 22.3.1 and scipy 1.9.3 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	22.3.1	<23.3	show Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.
pip	22.3.1	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

22.3.1

<23.3

show

Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.

pip

22.3.1

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

pyup/scheduled-update-2023-11-26

1 year, 8 months ago

7d5706ec

Update astropy from 5.1.1 to 5.3.4

pip 22.3.1 and scipy 1.9.3 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	22.3.1	<23.3	show Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.
pip	22.3.1	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

22.3.1

<23.3

show

Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.

pip

22.3.1

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

pyup/scheduled-update-2023-11-19

1 year, 9 months ago

9486943e

Update scipy from 1.9.3 to 1.11.4

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2023-11-19

1 year, 9 months ago

a6828db7

Update pip from 22.3.1 to 23.3.1

scipy 1.9.3 has known security vulnerabilities.

Package	Installed	Affected	Info