Safety CI > NeonGraal/script-venv

pyup-update-click-8.1.6-to-8.1.7

3 weeks, 2 days ago

a496abc9

Merge branch 'master' into pyup-update-click-8.1.6-to-8.1.7

No dependencies with known security vulnerabilities.

master

3 weeks, 2 days ago

eda6f05c

Merge pull request #1039 from NeonGraal/pyup-update-types-setuptools-69.5.0.20240415-to-69.5.0.20240

No dependencies with known security vulnerabilities.

pyup-update-click-8.1.6-to-8.1.7

3 weeks, 2 days ago

b156ccac

Merge branch 'master' into pyup-update-click-8.1.6-to-8.1.7

No dependencies with known security vulnerabilities.

pyup-update-types-setuptools-69.5.0.20240415-to-69.5.0.20240423

3 weeks, 2 days ago

fb0c68e1

Merge branch 'master' into pyup-update-types-setuptools-69.5.0.20240415-to-69.5.0.20240423

No dependencies with known security vulnerabilities.

master

3 weeks, 2 days ago

3ec2b62d

Merge pull request #1041 from NeonGraal/pyup-update-mypy-1.9.0-to-1.10.0 Update mypy to 1.10.0

No dependencies with known security vulnerabilities.

pyup-update-mypy-1.9.0-to-1.10.0

3 weeks, 2 days ago

b2d20193

Ignore pip from pyup bot

No dependencies with known security vulnerabilities.

pyup-update-mypy-1.9.0-to-1.10.0

3 weeks, 3 days ago

f012926d

Update mypy from 1.9.0 to 1.10.0

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

master

3 weeks, 3 days ago

5e980fcd

Merge pull request #1040 from NeonGraal/pyup-update-coverage-7.4.4-to-7.5.0 Update coverage to 7.5.

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

pyup-update-coverage-7.4.4-to-7.5.0

3 weeks, 3 days ago

993b859c

Update coverage from 7.4.4 to 7.5.0

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

pyup-update-types-setuptools-69.5.0.20240415-to-69.5.0.20240423

3 weeks, 4 days ago

2482e99a

Update types-setuptools from 69.5.0.20240415 to 69.5.0.20240423

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

master

4 weeks ago

62de334d

Merge pull request #1035 from NeonGraal/pyup-update-types-setuptools-69.2.0.20240317-to-69.5.0.20240

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

pyup-update-types-setuptools-69.2.0.20240317-to-69.5.0.20240415

4 weeks, 1 day ago

2111f9f8

Merge branch 'master' into pyup-update-types-setuptools-69.2.0.20240317-to-69.5.0.20240415

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

master

4 weeks, 1 day ago

a88f7dde

Merge pull request #1034 from NeonGraal/pyup-update-setuptools-69.2.0-to-69.5.1 Update setuptools t

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

pyup-update-setuptools-69.2.0-to-69.5.1

4 weeks, 1 day ago

0466675c

Merge branch 'master' into pyup-update-setuptools-69.2.0-to-69.5.1

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

master

4 weeks, 1 day ago

5d9e7266

Merge pull request #1038 from NeonGraal/pyup-update-sphinx-7.2.6-to-7.3.7 Update sphinx to 7.3.7

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.