Safety CI > MobSF/Mobile-Security-Framework-MobSF

pyup-scheduled-update-2020-06-03

6 years, 2 months ago

72c486df

Update django from 3.0.6 to 3.0.7

rsa 4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
rsa	4.0	>=3.0,<4.7	show Rsa 4.7 includes a fix for CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
rsa	4.0	<4.3	show Rsa 4.3 includes a fix for CVE-2020-13757: Python-RSA before 4.3 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

Package

Installed

Affected

Info

rsa

4.0

>=3.0,<4.7

show

Rsa 4.7 includes a fix for CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

rsa

4.0

<4.3

show

Rsa 4.3 includes a fix for CVE-2020-13757: Python-RSA before 4.3 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

pyup-scheduled-update-2020-06-03

6 years, 2 months ago

4bdcb29e

Update waitress from 1.4.3 to 1.4.4

rsa 4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
rsa	4.0	>=3.0,<4.7	show Rsa 4.7 includes a fix for CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
rsa	4.0	<4.3	show Rsa 4.3 includes a fix for CVE-2020-13757: Python-RSA before 4.3 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

Package

Installed

Affected

Info

rsa

4.0

>=3.0,<4.7

show

Rsa 4.7 includes a fix for CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

rsa

4.0

<4.3

show

Rsa 4.3 includes a fix for CVE-2020-13757: Python-RSA before 4.3 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

pyup-scheduled-update-2020-06-02

6 years, 2 months ago

c4f088e9

Update waitress from 1.4.3 to 1.4.4

No dependencies with known security vulnerabilities.

local-run

6 years, 2 months ago

f161e26d

test port

No dependencies with known security vulnerabilities.

local-run

6 years, 2 months ago

dca108d1

ip and port as variable

No dependencies with known security vulnerabilities.

local-run

6 years, 2 months ago

88a23af5

bind to localhost

No dependencies with known security vulnerabilities.

docker-optim

6 years, 2 months ago

20566683

Merge branch 'master' into docker-optim

No dependencies with known security vulnerabilities.

postgres

6 years, 2 months ago

ae158334

remove unwanted fil

Server Error.

postgres

6 years, 2 months ago

19683abc

better compose

No dependencies with known security vulnerabilities.

master

6 years, 2 months ago

fe533566

Scheduled daily dependency update on Friday (#1402) * Update lxml from 4.5.0 to 4.5.1 * Update whi

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-05-22

6 years, 2 months ago

8bf4d399

update frida

No dependencies with known security vulnerabilities.

postgres

6 years, 2 months ago

450bfd7f

Merge branch 'postgres' of https://github.com/MobSF/Mobile-Security-Framework-MobSF into postgres

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-05-22

6 years, 2 months ago

9f5ac7e2

Update frida from 12.9.2 to 12.9.4

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-05-22

6 years, 2 months ago

d81b5b81

Update whitenoise from 5.0.1 to 5.1.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-05-22

6 years, 2 months ago

be8e74c1

Update lxml from 4.5.0 to 4.5.1

No dependencies with known security vulnerabilities.