Safety CI > JoaoZati/flask

pyup-update-pytest-6.2.5-to-7.2.1

3 years, 2 months ago

Update pytest from 6.2.5 to 7.2.1

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-alembic-1.7.3-to-1.9.2

3 years, 2 months ago

8c48f1a8

Update alembic from 1.7.3 to 1.9.2

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-packaging-21.0-to-23.0

3 years, 2 months ago

ab015dc2

Update packaging from 21.0 to 23.0

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-iniconfig-1.1.1-to-2.0.0

3 years, 2 months ago

dfd30242

Update iniconfig from 1.1.1 to 2.0.0

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-flask-migrate-3.1.0-to-4.0.1

3 years, 2 months ago

9648916b

Update flask-migrate from 3.1.0 to 4.0.1

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-sqlalchemy-1.4.23-to-1.4.46

3 years, 3 months ago

f7f034dd

Update sqlalchemy from 1.4.23 to 1.4.46

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.46 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-alembic-1.7.3-to-1.9.1

3 years, 3 months ago

9a7a376c

Update alembic from 1.7.3 to 1.9.1

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-attrs-21.2.0-to-22.2.0

3 years, 3 months ago

a36c406a

Update attrs from 21.2.0 to 22.2.0

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-alembic-1.7.3-to-1.9.0

3 years, 3 months ago

7c9524f1

Update alembic from 1.7.3 to 1.9.0

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-sqlalchemy-1.4.23-to-1.4.45

3 years, 3 months ago

0a93e150

Update sqlalchemy from 1.4.23 to 1.4.45

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.45 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.45	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-packaging-21.0-to-22.0

3 years, 3 months ago

24b53af9

Update packaging from 21.0 to 22.0

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-pyflakes-2.3.1-to-3.0.1

3 years, 4 months ago

27508e65

Update pyflakes from 2.3.1 to 3.0.1

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-pyflakes-2.3.1-to-3.0.0

3 years, 4 months ago

081bafdb

Update pyflakes from 2.3.1 to 3.0.0

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-pycodestyle-2.7.0-to-2.10.0

3 years, 4 months ago

6c3b23c0

Update pycodestyle from 2.7.0 to 2.10.0

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-flake8-3.9.2-to-6.0.0

3 years, 4 months ago

65a9a4a5

Update flake8 from 3.9.2 to 6.0.0

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

JoaoZati/flask_app