Safety CI > LPUG/LPUG.github.io

pyup-pin-pytz-2024.2

5 days, 3 hours ago

b3fc96da

Pin pytz to latest version 2024.2

click 7.1.2 and Lektor 3.3.3 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

Lektor

3.3.3

>=0,<3.3.11 , >=3.4.0b1,<3.4.0b11

show

Lektor affected versions does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted website that uses JavaScript to send requests to localhost port 5000, and the web browser is running on the same machine as the "lektor server" command.

master

1 week, 5 days ago

e01ecc1e

Deploying to master from @ LPUG/LPUG.github.io@9e3bc4912cbb8fb91474c9634c54feca979b5598 🚀

No dependencies with known security vulnerabilities.

content

1 week, 5 days ago

9e3bc491

Add PyCamp 2025

click 7.1.2 and Lektor 3.3.3 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

Lektor

3.3.3

>=0,<3.3.11 , >=3.4.0b1,<3.4.0b11

show

Lektor affected versions does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted website that uses JavaScript to send requests to localhost port 5000, and the web browser is running on the same machine as the "lektor server" command.

pyup-update-lektor-3.3.3-to-3.3.12

4 weeks ago

a35b50de

Update lektor from 3.3.3 to 3.3.12

click 7.1.2 has known security vulnerabilities.

Package	Installed	Affected	Info
click	7.1.2	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752

master

1 month, 1 week ago

21d16e6c

Deploying to master from @ LPUG/LPUG.github.io@c3b73602eb51b637f61a3e20ed7e59766d7d01cd 🚀

No dependencies with known security vulnerabilities.

content

1 month, 1 week ago

c3b73602

Add August topic

click 7.1.2 and Lektor 3.3.3 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

Lektor

3.3.3

>=0,<3.3.11 , >=3.4.0b1,<3.4.0b11

show

Lektor affected versions does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted website that uses JavaScript to send requests to localhost port 5000, and the web browser is running on the same machine as the "lektor server" command.

master

2 months, 1 week ago

df2e23db

Deploying to master from @ LPUG/LPUG.github.io@b9216e947b79df5fe6a04d338fd1e41ca0a3eb3c 🚀

No dependencies with known security vulnerabilities.

content

2 months, 1 week ago

b9216e94

Add July topic

click 7.1.2 and Lektor 3.3.3 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

Lektor

3.3.3

>=0,<3.3.11 , >=3.4.0b1,<3.4.0b11

show

Lektor affected versions does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted website that uses JavaScript to send requests to localhost port 5000, and the web browser is running on the same machine as the "lektor server" command.

master

3 months, 1 week ago

9f9771d0

Deploying to master from @ LPUG/LPUG.github.io@a21fb3522d3868f35660ed8a42b324c3ee1e91ab 🚀

No dependencies with known security vulnerabilities.

content

3 months, 1 week ago

a21fb352

Fix grammar

click 7.1.2 has known security vulnerabilities.

Package	Installed	Affected	Info
click	7.1.2	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752

master

3 months, 1 week ago

60de49a9

Deploying to master from @ LPUG/LPUG.github.io@26230a9d758b637f4a591bddf29c36ce18935765 🚀

No dependencies with known security vulnerabilities.

content

3 months, 1 week ago

26230a9d

Fix typo

click 7.1.2 has known security vulnerabilities.

Package	Installed	Affected	Info
click	7.1.2	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752

master

3 months, 1 week ago

4ce57746

Deploying to master from @ LPUG/LPUG.github.io@c3385a56709d605de35c1fbe991fa97398b14d05 🚀

No dependencies with known security vulnerabilities.

content

3 months, 1 week ago

c3385a56

Add presenter to table

click 7.1.2 has known security vulnerabilities.

Package	Installed	Affected	Info
click	7.1.2	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752

master

3 months, 1 week ago

2e131049

Deploying to master from @ LPUG/LPUG.github.io@178bdcd5881d08e1a53c2f1212e6e82db75accb1 🚀

No dependencies with known security vulnerabilities.