Safety CI > adiomachado/newlibpythonpro

pyup-update-importlib-metadata-1.6.0-to-3.3.0

5 years, 4 months ago

599d12ae

Update importlib-metadata from 1.6.0 to 3.3.0

py 1.8.1 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.8.1	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.8.1	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.8.1

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.8.1

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-importlib-metadata-1.6.0-to-3.2.0

5 years, 4 months ago

e58155d0

Update importlib-metadata from 1.6.0 to 3.2.0

py 1.8.1 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.8.1	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.8.1	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.8.1

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.8.1

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-pytest-5.4.1-to-6.2.0

5 years, 4 months ago

df6c885d

Update pytest from 5.4.1 to 6.2.0

py 1.8.1 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.8.1	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.8.1	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.8.1

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.8.1

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-py-1.8.1-to-1.10.0

5 years, 4 months ago

cbc974a9

Update py from 1.8.1 to 1.10.0

No dependencies with known security vulnerabilities.

pyup-update-packaging-20.3-to-20.8

5 years, 4 months ago

4ecb11f3

Update packaging from 20.3 to 20.8

py 1.8.1 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.8.1	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.8.1	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.8.1

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.8.1

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-chardet-3.0.4-to-4.0.0

5 years, 4 months ago

127229e2

Update chardet from 3.0.4 to 4.0.0

No dependencies with known security vulnerabilities.

pyup-update-chardet-3.0.4-to-4.0.0

5 years, 4 months ago

605beb66

Update chardet from 3.0.4 to 4.0.0

No dependencies with known security vulnerabilities.

pyup-update-certifi-2020.4.5.1-to-2020.12.5

5 years, 4 months ago

01bda468

Update certifi from 2020.4.5.1 to 2020.12.5

No dependencies with known security vulnerabilities.

pyup-update-certifi-2020.4.5.1-to-2020.12.5

5 years, 4 months ago

181faea9

Update certifi from 2020.4.5.1 to 2020.12.5

No dependencies with known security vulnerabilities.

pyup-update-importlib-metadata-1.6.0-to-3.1.1

5 years, 4 months ago

4dc07683

Update importlib-metadata from 1.6.0 to 3.1.1

No dependencies with known security vulnerabilities.

pyup-update-packaging-20.3-to-20.7

5 years, 4 months ago

694044a5

Update packaging from 20.3 to 20.7

No dependencies with known security vulnerabilities.

pyup-update-packaging-20.3-to-20.5

5 years, 4 months ago

d0cfc712

Update packaging from 20.3 to 20.5

No dependencies with known security vulnerabilities.

pyup-update-importlib-metadata-1.6.0-to-3.1.0

5 years, 4 months ago

3aee57a5

Update importlib-metadata from 1.6.0 to 3.1.0

No dependencies with known security vulnerabilities.

pyup-update-importlib-metadata-1.6.0-to-3.0.0

5 years, 4 months ago

1bf1e106

Update importlib-metadata from 1.6.0 to 3.0.0

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.25.9-to-1.26.2

5 years, 5 months ago

4d058d99

Update urllib3 from 1.25.9 to 1.26.2

No dependencies with known security vulnerabilities.