Safety CI > PennyDreadfulMTG/Penny-Dreadful-Tools

dependabot/pip/mypy-0.812

5 years, 8 months ago

e5211fa7

Bump mypy from 0.782 to 0.812 Bumps [mypy](https://github.com/python/mypy) from 0.782 to 0.812. - [

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

b5392aa4

Bump inflect from 5.0.2 to 5.2.0 Bumps [inflect](https://github.com/jaraco/inflect) from 5.0.2 to 5

No dependencies with known security vulnerabilities.

dependabot/pip/rsa-4.7.2

5 years, 8 months ago

fa1ece5d

Bump rsa from 4.7.1 to 4.7.2 Bumps [rsa](https://github.com/sybrenstuvel/python-rsa) from 4.7.1 to

No dependencies with known security vulnerabilities.

dependabot/pip/protobuf-3.15.2

5 years, 8 months ago

191ce2f0

Bump protobuf from 3.15.1 to 3.15.2 Bumps [protobuf](https://github.com/protocolbuffers/protobuf) f

No dependencies with known security vulnerabilities.

dependabot/pip/inflect-5.2.0

5 years, 8 months ago

7f33a842

Bump inflect from 5.0.2 to 5.2.0 Bumps [inflect](https://github.com/jaraco/inflect) from 5.0.2 to 5

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

4b21fe20

Bump webpack from 5.24.0 to 5.24.1 Bumps [webpack](https://github.com/webpack/webpack) from 5.24.0

No dependencies with known security vulnerabilities.

dependabot/npm_and_yarn/webpack-5.24.1

5 years, 8 months ago

e258ba0f

Bump webpack from 5.24.0 to 5.24.1 Bumps [webpack](https://github.com/webpack/webpack) from 5.24.0

No dependencies with known security vulnerabilities.

game_analysis_spike

5 years, 8 months ago

04786f64

couple bugfixes for old formats: Winner and player on the play

pylint 2.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.5.3	<2.7.0	show Pylint 2.7.0 includes a fix for vulnerable regular expressions in 'pyreverse'. https://github.com/pylint-dev/pylint/commit/5405dd5115d598fa69e49538d50ec79202b1b52e
pylint	2.5.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
pylint	2.5.3	>=0,<2.6.1	show Pylint before 2.6.1 is susceptible to a Regular Expression Denial of Service (ReDoS) vulnerability due to issues in its pyreverse component. This issue arises from certain regular expressions in pyreverse that can be exploited by causing catastrophic backtracking, significantly slowing down the service by forcing it to take a disproportionate amount of time to process inputs. This vulnerability allows attackers to use specially crafted inputs that increase the processing time exponentially, potentially leading to a service becoming inaccessible to legitimate users. https://github.com/pylint-dev/pylint/commit/5405dd5115d598fa69e49538d50ec79202b1b52e

Package

Installed

Affected

Info

pylint

2.5.3

<2.7.0

show

Pylint 2.7.0 includes a fix for vulnerable regular expressions in 'pyreverse'.
https://github.com/pylint-dev/pylint/commit/5405dd5115d598fa69e49538d50ec79202b1b52e

pylint

2.5.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

pylint

2.5.3

>=0,<2.6.1

show

Pylint before 2.6.1 is susceptible to a Regular Expression Denial of Service (ReDoS) vulnerability due to issues in its pyreverse component. This issue arises from certain regular expressions in pyreverse that can be exploited by causing catastrophic backtracking, significantly slowing down the service by forcing it to take a disproportionate amount of time to process inputs. This vulnerability allows attackers to use specially crafted inputs that increase the processing time exponentially, potentially leading to a service becoming inaccessible to legitimate users.
https://github.com/pylint-dev/pylint/commit/5405dd5115d598fa69e49538d50ec79202b1b52e

dependabot/pip/mypy-0.812

5 years, 8 months ago

985778f3

Bump mypy from 0.782 to 0.812 Bumps [mypy](https://github.com/python/mypy) from 0.782 to 0.812. - [

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

cd6521bb

Bump flask-migrate from 2.6.0 to 2.7.0 Bumps [flask-migrate](https://github.com/miguelgrinberg/flas

No dependencies with known security vulnerabilities.

dependabot/pip/mypy-0.812

5 years, 8 months ago

5afe3fe2

Bump mypy from 0.782 to 0.812 Bumps [mypy](https://github.com/python/mypy) from 0.782 to 0.812. - [

No dependencies with known security vulnerabilities.

dependabot/pip/flask-migrate-2.7.0

5 years, 8 months ago

580f1811

Bump flask-migrate from 2.6.0 to 2.7.0 Bumps [flask-migrate](https://github.com/miguelgrinberg/flas

No dependencies with known security vulnerabilities.

dependabot/pip/mypy-0.812

5 years, 8 months ago

1d1ca690

Bump mypy from 0.782 to 0.812 Bumps [mypy](https://github.com/python/mypy) from 0.782 to 0.812. - [

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

6ae891ad

Bump @babel/plugin-proposal-class-properties from 7.12.13 to 7.13.0 Bumps [@babel/plugin-proposal-c

No dependencies with known security vulnerabilities.

master

5 years, 8 months ago

51afe477

Bump @babel/core from 7.12.16 to 7.13.1 Bumps [@babel/core](https://github.com/babel/babel/tree/HEA

No dependencies with known security vulnerabilities.