Safety CI > aergoio/herapy

pyup-scheduled-update-2020-05-01

5 years, 12 months ago

02c39f75

Update jinja2 from 2.11.1 to 2.11.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-05-01

5 years, 12 months ago

f931e4a6

Update importlib-metadata from 1.5.0 to 1.6.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-05-01

5 years, 12 months ago

f47f0073

Update grpcio-tools from 1.27.2 to 1.28.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-05-01

5 years, 12 months ago

6000a615

Update coverage from 5.0.4 to 5.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-05-01

5 years, 12 months ago

531c8b82

Update certifi from 2019.11.28 to 2020.4.5.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-05-01

5 years, 12 months ago

53d81148

Update bleach from 3.1.3 to 3.1.5

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-05-01

5 years, 12 months ago

73c56133

Update grpcio from 1.27.2 to 1.28.1

bleach 3.1.3 has known security vulnerabilities.

Package	Installed	Affected	Info
bleach	3.1.3	<3.3.0	show Bleach 3.3.0 includes a fix for CVE-2021-23980: A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of the above tags are in the default allowed tags and strip_comments defaults to True.
bleach	3.1.3	<=3.1.3	show Bleach 3.1.4 includes a fix for CVE-2020-6817: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable to ReDoS. For example, bleach.clean(..., attributes={'a': ['style']}).

Package

Installed

Affected

Info

bleach

3.1.3

<3.3.0

show

Bleach 3.3.0 includes a fix for CVE-2021-23980: A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of the above tags are in the default allowed tags and strip_comments defaults to True.

bleach

3.1.3

<=3.1.3

show

Bleach 3.1.4 includes a fix for CVE-2020-6817: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable to ReDoS. For example, bleach.clean(..., attributes={'a': ['style']}).

pyup-scheduled-update-2020-05-01

5 years, 12 months ago

13254bb0

Update grpcio from 1.27.2 to 1.28.1

bleach 3.1.3 has known security vulnerabilities.

Package	Installed	Affected	Info
bleach	3.1.3	<3.3.0	show Bleach 3.3.0 includes a fix for CVE-2021-23980: A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of the above tags are in the default allowed tags and strip_comments defaults to True.
bleach	3.1.3	<=3.1.3	show Bleach 3.1.4 includes a fix for CVE-2020-6817: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable to ReDoS. For example, bleach.clean(..., attributes={'a': ['style']}).

Package

Installed

Affected

Info

bleach

3.1.3

<3.3.0

show

Bleach 3.3.0 includes a fix for CVE-2021-23980: A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of the above tags are in the default allowed tags and strip_comments defaults to True.

bleach

3.1.3

<=3.1.3

show

Bleach 3.1.4 includes a fix for CVE-2020-6817: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable to ReDoS. For example, bleach.clean(..., attributes={'a': ['style']}).

pyup-scheduled-update-2020-05-01

5 years, 12 months ago

537590dc

Update cryptography from 2.8 to 2.9.2

bleach 3.1.3 has known security vulnerabilities.

Package	Installed	Affected	Info
bleach	3.1.3	<3.3.0	show Bleach 3.3.0 includes a fix for CVE-2021-23980: A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of the above tags are in the default allowed tags and strip_comments defaults to True.
bleach	3.1.3	<=3.1.3	show Bleach 3.1.4 includes a fix for CVE-2020-6817: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable to ReDoS. For example, bleach.clean(..., attributes={'a': ['style']}).

Package

Installed

Affected

Info

bleach

3.1.3

<3.3.0

show

Bleach 3.3.0 includes a fix for CVE-2021-23980: A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of the above tags are in the default allowed tags and strip_comments defaults to True.

bleach

3.1.3

<=3.1.3

show

Bleach 3.1.4 includes a fix for CVE-2020-6817: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable to ReDoS. For example, bleach.clean(..., attributes={'a': ['style']}).

pyup-scheduled-update-2020-04-01

6 years ago

f45a1cd6

Update wcwidth from 0.1.8 to 0.1.9

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-04-01

6 years ago

50b02b5d

Update virtualenv from 20.0.11 to 20.0.15

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-04-01

6 years ago

5a9e4693

Update tqdm from 4.43.0 to 4.44.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-04-01

6 years ago

f5fac3a4

Update tox from 3.14.5 to 3.14.6

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-04-01

6 years ago

9a2b2fed

Update pytest-mock from 2.0.0 to 3.0.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-04-01

6 years ago

1bc8cf4e

Update importlib-metadata from 1.5.0 to 1.6.0

No dependencies with known security vulnerabilities.