Safety CI > RobotStudio/bors

pyup-update-pytest-cov-2.6.1-to-2.7.1

6 years, 4 months ago

6c7768b4

Update pytest-cov from 2.6.1 to 2.7.1

No dependencies with known security vulnerabilities.

master

6 years, 4 months ago

55ace047

Merge pull request #118 from RobotStudio/pyup-update-urllib3-1.25-to-1.25.2 Update urllib3 to 1.25.

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.25-to-1.25.2

6 years, 4 months ago

82d2fc4a

Update urllib3 from 1.25 to 1.25.2

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.25-to-1.25.1

6 years, 4 months ago

e01d74de

Update urllib3 from 1.25 to 1.25.1

No dependencies with known security vulnerabilities.

master

6 years, 4 months ago

38bf338f

Merge pull request #116 from RobotStudio/pyup-update-urllib3-1.24.2-to-1.25 Update urllib3 to 1.25

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.24.2-to-1.25

6 years, 4 months ago

dc79bfcb

Update urllib3 from 1.24.2 to 1.25

No dependencies with known security vulnerabilities.

master

6 years, 4 months ago

a58eb39a

Merge pull request #115 from RobotStudio/pyup-update-tox-3.8.6-to-3.9.0 Update tox to 3.9.0

No dependencies with known security vulnerabilities.

master

6 years, 4 months ago

d26572cc

Merge pull request #114 from RobotStudio/pyup-update-urllib3-1.24.1-to-1.24.2 Update urllib3 to 1.2

No dependencies with known security vulnerabilities.

pyup-update-tox-3.8.6-to-3.9.0

6 years, 4 months ago

6f187720

Update tox from 3.8.6 to 3.9.0

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.24.1-to-1.24.2

6 years, 4 months ago

4afd769a

Update urllib3 from 1.24.1 to 1.24.2

No dependencies with known security vulnerabilities.

master

6 years, 4 months ago

2a66dee9

Merge pull request #113 from RobotStudio/pyup-update-pytest-4.4.0-to-4.4.1 Update pytest to 4.4.1

No dependencies with known security vulnerabilities.

pyup-update-pytest-4.4.0-to-4.4.1

6 years, 4 months ago

fe75844d

Update pytest from 4.4.0 to 4.4.1

No dependencies with known security vulnerabilities.

master

6 years, 5 months ago

8aa5c67a

Merge pull request #112 from RobotStudio/pyup-update-sphinx-2.0.0-to-2.0.1 Update sphinx to 2.0.1

No dependencies with known security vulnerabilities.

pyup-update-sphinx-2.0.0-to-2.0.1

6 years, 5 months ago

41efc2d0

Update sphinx from 2.0.0 to 2.0.1

No dependencies with known security vulnerabilities.

feature/shadowgen_plugins

6 years, 5 months ago

81addd66

Added some CLI testing

requests 2.19.1 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.19.1	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.19.1	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.19.1	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.19.1	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.