Safety CI > aguiardafa/projeto-base-stack-django

pyup-scheduled-update-2023-06-19

2 years, 5 months ago

b77a5cf0

Update typing-extensions from 4.6.2 to 4.6.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-06-19

2 years, 5 months ago

7771d700

Update django from 4.2.1 to 4.2.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-06-12

2 years, 5 months ago

d2cbcd4e

Update typing-extensions from 4.6.2 to 4.6.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-06-12

2 years, 5 months ago

33fa8be5

Update django from 4.2.1 to 4.2.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-06-05

2 years, 5 months ago

ac7afd42

Update typing-extensions from 4.6.2 to 4.6.3

No dependencies with known security vulnerabilities.

main

2 years, 5 months ago

01c814ee

Merge pull request #72 from aguiardafa/pyup-scheduled-update-2023-05-29 Scheduled weekly dependency

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-29

2 years, 5 months ago

27d07592

Update typing-extensions from 4.5.0 to 4.6.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-29

2 years, 5 months ago

43842fe9

Update setuptools from 67.7.2 to 67.8.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-29

2 years, 5 months ago

94c828ca

Update asgiref from 3.6.0 to 3.7.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-22

2 years, 6 months ago

1cc98765

Update setuptools from 67.7.2 to 67.8.0

No dependencies with known security vulnerabilities.

main

2 years, 6 months ago

4db3f583

Merge pull request #70 from aguiardafa/pyup-scheduled-update-2023-05-15 Scheduled weekly dependency

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-15

2 years, 6 months ago

c72f4c79

Update typing-extensions from 4.4.0 to 4.5.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-15

2 years, 6 months ago

dc1669d4

Update sqlparse from 0.4.3 to 0.4.4

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-15

2 years, 6 months ago

4aca0a69

Update setuptools from 67.2.0 to 67.7.2

sqlparse 0.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.4.3	>=0.1.15,<0.4.4	show Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service). https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2
sqlparse	0.4.3	<0.5.0	show Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.

Package

Installed

Affected

Info

sqlparse

0.4.3

>=0.1.15,<0.4.4

show

Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service).
https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2

sqlparse

0.4.3

<0.5.0

show

Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.

pyup-scheduled-update-2023-05-15

2 years, 6 months ago

f27b863a

Update python-decouple from 3.7 to 3.8

sqlparse 0.4.3 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.4.3	>=0.1.15,<0.4.4	show Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service). https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2
sqlparse	0.4.3	<0.5.0	show Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.

Package

Installed

Affected

Info

sqlparse

0.4.3

>=0.1.15,<0.4.4

show

Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service).
https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2

sqlparse

0.4.3

<0.5.0

show

Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.