Safety CI > JoaoZati/flask

pyup-update-mako-1.1.5-to-1.2.4

3 years, 4 months ago

9bd4ae97

Update mako from 1.1.5 to 1.2.4

py 1.10.0, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package

Installed

Affected

Info

py

1.10.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

wtforms

2.3.3

<3.0.0a1

show

Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability.
https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

sqlalchemy

1.4.23

<2.0.0b1

show

Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints.
https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-flask-migrate-3.1.0-to-4.0.0

3 years, 4 months ago

b16cff21

Update flask-migrate from 3.1.0 to 4.0.0

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.23 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.23	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-sqlalchemy-1.4.23-to-1.4.44

3 years, 4 months ago

f26008be

Update sqlalchemy from 1.4.23 to 1.4.44

py 1.10.0, mako 1.1.5, wtforms 2.3.3 and sqlalchemy 1.4.44 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6
sqlalchemy	1.4.44	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-update-greenlet-1.1.1-to-2.0.1

3 years, 4 months ago

dddecc41

Update greenlet from 1.1.1 to 2.0.1

py 1.10.0, mako 1.1.5 and wtforms 2.3.3 have known security vulnerabilities.

Package

Installed

Affected

Info

py

1.10.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

mako

1.1.5

<1.2.2

show

Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

wtforms

2.3.3

<3.0.0a1

show

Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability.
https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

pyup-update-sqlalchemy-1.4.23-to-1.4.43

3 years, 5 months ago

ea90e322

Update sqlalchemy from 1.4.23 to 1.4.43

py 1.10.0, mako 1.1.5 and wtforms 2.3.3 have known security vulnerabilities.

Package

Installed

Affected

Info

py

1.10.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

mako

1.1.5

<1.2.2

show

Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

wtforms

2.3.3

<3.0.0a1

show

Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability.
https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

pyup-update-greenlet-1.1.1-to-2.0.0.post0

3 years, 5 months ago

d2b8147e

Update greenlet from 1.1.1 to 2.0.0.post0

py 1.10.0, mako 1.1.5 and wtforms 2.3.3 have known security vulnerabilities.

Package

Installed

Affected

Info

py

1.10.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

mako

1.1.5

<1.2.2

show

Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

wtforms

2.3.3

<3.0.0a1

show

Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability.
https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

pyup-update-greenlet-1.1.1-to-2.0.0

3 years, 5 months ago

1c5b8981

Update greenlet from 1.1.1 to 2.0.0

py 1.10.0, mako 1.1.5 and wtforms 2.3.3 have known security vulnerabilities.

Package

Installed

Affected

Info

py

1.10.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

mako

1.1.5

<1.2.2

show

Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

wtforms

2.3.3

<3.0.0a1

show

Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability.
https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

pyup-update-pytest-6.2.5-to-7.2.0

3 years, 5 months ago

6a556159

Update pytest from 6.2.5 to 7.2.0

py 1.10.0, mako 1.1.5 and wtforms 2.3.3 have known security vulnerabilities.

Package

Installed

Affected

Info

py

1.10.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

mako

1.1.5

<1.2.2

show

Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

wtforms

2.3.3

<3.0.0a1

show

Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability.
https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

pyup-update-sqlalchemy-1.4.23-to-1.4.42

3 years, 5 months ago

e27ebf29

Update sqlalchemy from 1.4.23 to 1.4.42

mako 1.1.5 and wtforms 2.3.3 have known security vulnerabilities.

Package	Installed	Affected	Info
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

Package

Installed

Affected

Info

mako

1.1.5

<1.2.2

show

Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

wtforms

2.3.3

<3.0.0a1

show

Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability.
https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

pyup-update-flask-sqlalchemy-2.5.1-to-3.0.2

3 years, 5 months ago

957b2fd0

Update flask-sqlalchemy from 2.5.1 to 3.0.2

mako 1.1.5 and wtforms 2.3.3 have known security vulnerabilities.

Package	Installed	Affected	Info
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

Package

Installed

Affected

Info

mako

1.1.5

<1.2.2

show

Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

wtforms

2.3.3

<3.0.0a1

show

Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability.
https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

pyup-update-flask-sqlalchemy-2.5.1-to-3.0.1

3 years, 5 months ago

f1c28ac1

Update flask-sqlalchemy from 2.5.1 to 3.0.1

mako 1.1.5 and wtforms 2.3.3 have known security vulnerabilities.

Package	Installed	Affected	Info
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

Package

Installed

Affected

Info

mako

1.1.5

<1.2.2

show

Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

wtforms

2.3.3

<3.0.0a1

show

Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability.
https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

pyup-update-greenlet-1.1.1-to-1.1.3.post0

3 years, 5 months ago

3e77123e

Update greenlet from 1.1.1 to 1.1.3.post0

mako 1.1.5 and wtforms 2.3.3 have known security vulnerabilities.

Package	Installed	Affected	Info
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

Package

Installed

Affected

Info

mako

1.1.5

<1.2.2

show

Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

wtforms

2.3.3

<3.0.0a1

show

Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability.
https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

pyup-update-flask-sqlalchemy-2.5.1-to-3.0.0

3 years, 6 months ago

1960e662

Update flask-sqlalchemy from 2.5.1 to 3.0.0

mako 1.1.5 and wtforms 2.3.3 have known security vulnerabilities.

Package	Installed	Affected	Info
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

Package

Installed

Affected

Info

mako

1.1.5

<1.2.2

show

Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

wtforms

2.3.3

<3.0.0a1

show

Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability.
https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

pyup-update-mako-1.1.5-to-1.2.3

3 years, 6 months ago

5f895493

Update mako from 1.1.5 to 1.2.3

wtforms 2.3.3 has known security vulnerabilities.

Package	Installed	Affected	Info
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

pyup-update-sqlalchemy-1.4.23-to-1.4.41

3 years, 7 months ago

138d08f7

Update sqlalchemy from 1.4.23 to 1.4.41

mako 1.1.5 and wtforms 2.3.3 have known security vulnerabilities.

Package	Installed	Affected	Info
mako	1.1.5	<1.2.2	show Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
wtforms	2.3.3	<3.0.0a1	show Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability. https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

Package

Installed

Affected

Info

mako

1.1.5

<1.2.2

show

Mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

wtforms

2.3.3

<3.0.0a1

show

Wtforms 3.0.0a1 escape unsafe characters in label text, patching a potential XSS vulnerability.
https://github.com/wtforms/wtforms/commit/8529b953a0919300794f95e01a7713162908c8a6

JoaoZati/flask_app