Safety CI > PennyDreadfulMTG/Penny-Dreadful-Tools

pyup-update-redis-3.4.1-to-3.5.0

6 years, 3 months ago

67d03186

Update redis from 3.4.1 to 3.5.0

No dependencies with known security vulnerabilities.

dependabot/npm_and_yarn/babel/preset-env-7.9.6

6 years, 3 months ago

4802dea6

Bump @babel/preset-env from 7.9.5 to 7.9.6 Bumps [@babel/preset-env](https://github.com/babel/babel

No dependencies with known security vulnerabilities.

dependabot/npm_and_yarn/babel/core-7.9.6

6 years, 3 months ago

4372124d

Bump @babel/core from 7.9.0 to 7.9.6 Bumps [@babel/core](https://github.com/babel/babel) from 7.9.0

No dependencies with known security vulnerabilities.

pyup-update-pytz-2019.3-to-2020.1

6 years, 3 months ago

5788abe8

Update pytz from 2019.3 to 2020.1

No dependencies with known security vulnerabilities.

master

6 years, 3 months ago

b4d60420

Merge pull request #7286 from PennyDreadfulMTG/rotato Progress on discordpy types

No dependencies with known security vulnerabilities.

rotato

6 years, 3 months ago

87bda589

More linting, because #7161 was merged while failing

No dependencies with known security vulnerabilities.

rotato

6 years, 3 months ago

101f3027

Sort imports

No dependencies with known security vulnerabilities.

rotato

6 years, 3 months ago

94ed748e

Typing

No dependencies with known security vulnerabilities.

rotato

6 years, 3 months ago

b24d2533

Typing

pylint 2.4.4 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.4.4	<2.7.0	show Pylint 2.7.0 includes a fix for vulnerable regular expressions in 'pyreverse'. https://github.com/pylint-dev/pylint/commit/5405dd5115d598fa69e49538d50ec79202b1b52e
pylint	2.4.4	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
pylint	2.4.4	<2.5.0	show Pylint 2.5.0 no longer allows ``python -m pylint ...`` to import user code. Previously, it added the current working directory as the first element of ``sys.path``. This opened up a potential security hole where ``pylint`` would import user level code as long as that code resided in modules having the same name as stdlib or pylint's own modules.
pylint	2.4.4	>=0,<2.6.1	show Pylint before 2.6.1 is susceptible to a Regular Expression Denial of Service (ReDoS) vulnerability due to issues in its pyreverse component. This issue arises from certain regular expressions in pyreverse that can be exploited by causing catastrophic backtracking, significantly slowing down the service by forcing it to take a disproportionate amount of time to process inputs. This vulnerability allows attackers to use specially crafted inputs that increase the processing time exponentially, potentially leading to a service becoming inaccessible to legitimate users. https://github.com/pylint-dev/pylint/commit/5405dd5115d598fa69e49538d50ec79202b1b52e

master

6 years, 3 months ago

5a57863a

Merge pull request #7161 from PennyDreadfulMTG/nosupplemental Remove all concept of supplemental ro

No dependencies with known security vulnerabilities.

dependabot/pip/pytz-2020.1

6 years, 3 months ago

13d684e2

Bump pytz from 2019.3 to 2020.1 Bumps [pytz](https://github.com/stub42/pytz) from 2019.3 to 2020.1.

No dependencies with known security vulnerabilities.

dependabot/npm_and_yarn/style-loader-1.2.1

6 years, 3 months ago

e3d5cfa5

Bump style-loader from 1.2.0 to 1.2.1 Bumps [style-loader](https://github.com/webpack-contrib/style

No dependencies with known security vulnerabilities.

nosupplemental

6 years, 3 months ago

6cdc1ea1

Revert "Spurious change to restart build." This reverts commit 2d176dcd93bd8e8b1bdc11e07fcf277dae10

No dependencies with known security vulnerabilities.

nosupplemental

6 years, 3 months ago

2d176dcd

Spurious change to restart build.

No dependencies with known security vulnerabilities.

rotato

6 years, 3 months ago

01830058

lint errors

pylint 2.4.4 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.4.4	<2.7.0	show Pylint 2.7.0 includes a fix for vulnerable regular expressions in 'pyreverse'. https://github.com/pylint-dev/pylint/commit/5405dd5115d598fa69e49538d50ec79202b1b52e
pylint	2.4.4	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322
pylint	2.4.4	<2.5.0	show Pylint 2.5.0 no longer allows ``python -m pylint ...`` to import user code. Previously, it added the current working directory as the first element of ``sys.path``. This opened up a potential security hole where ``pylint`` would import user level code as long as that code resided in modules having the same name as stdlib or pylint's own modules.
pylint	2.4.4	>=0,<2.6.1	show Pylint before 2.6.1 is susceptible to a Regular Expression Denial of Service (ReDoS) vulnerability due to issues in its pyreverse component. This issue arises from certain regular expressions in pyreverse that can be exploited by causing catastrophic backtracking, significantly slowing down the service by forcing it to take a disproportionate amount of time to process inputs. This vulnerability allows attackers to use specially crafted inputs that increase the processing time exponentially, potentially leading to a service becoming inaccessible to legitimate users. https://github.com/pylint-dev/pylint/commit/5405dd5115d598fa69e49538d50ec79202b1b52e