Safety CI > aguiardafa/projetodjango

master

4 years, 2 months ago

1bfbfd99

Merge pull request #1121 from aguiardafa/pyup-update-botocore-1.21.42-to-1.21.43 Update botocore to

No dependencies with known security vulnerabilities.

pyup-update-botocore-1.21.42-to-1.21.43

4 years, 2 months ago

fc30dd89

Update botocore from 1.21.42 to 1.21.43

No dependencies with known security vulnerabilities.

master

4 years, 2 months ago

dc0c40d6

Merge pull request #1120 from aguiardafa/pyup-update-boto3-1.18.42-to-1.18.43 Update boto3 to 1.18.

No dependencies with known security vulnerabilities.

pyup-update-boto3-1.18.42-to-1.18.43

4 years, 2 months ago

8d35cd75

Update boto3 from 1.18.42 to 1.18.43

No dependencies with known security vulnerabilities.

master

4 years, 2 months ago

6d813965

Merge pull request #1119 from aguiardafa/pyup-update-botocore-1.21.38-to-1.21.42 Update botocore to

No dependencies with known security vulnerabilities.

master

4 years, 2 months ago

cc1e6627

Merge pull request #1118 from aguiardafa/pyup-update-boto3-1.18.41-to-1.18.42 Update boto3 to 1.18.

No dependencies with known security vulnerabilities.

pyup-update-botocore-1.21.38-to-1.21.42

4 years, 2 months ago

80dc4221

Update botocore from 1.21.38 to 1.21.42

No dependencies with known security vulnerabilities.

pyup-update-boto3-1.18.41-to-1.18.42

4 years, 2 months ago

14801bec

Update boto3 from 1.18.41 to 1.18.42

No dependencies with known security vulnerabilities.

pyup-update-botocore-1.21.38-to-1.21.41

4 years, 2 months ago

cf5814c8

Update botocore from 1.21.38 to 1.21.41

No dependencies with known security vulnerabilities.

master

4 years, 2 months ago

83126e68

Merge pull request #1116 from aguiardafa/pyup-update-boto3-1.18.38-to-1.18.41 Update boto3 to 1.18.

No dependencies with known security vulnerabilities.

pyup-update-boto3-1.18.38-to-1.18.41

4 years, 2 months ago

75f18aec

Update boto3 from 1.18.38 to 1.18.41

No dependencies with known security vulnerabilities.

master

4 years, 2 months ago

ef68d473

Merge pull request #1110 from aguiardafa/pyup-update-sqlparse-0.4.1-to-0.4.2 Update sqlparse to 0.4

No dependencies with known security vulnerabilities.

pyup-update-botocore-1.21.38-to-1.21.41

4 years, 2 months ago

ca63fa0a

Update botocore from 1.21.38 to 1.21.41

sqlparse 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.4.1	>=0.1.15,<0.4.4	show Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service). https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2
sqlparse	0.4.1	>=0.4.0,<0.4.2	show Sqlparse version 0.4.2 includes a fix for CVE-2021-32839: In sqlparse versions 0.4.0 and 0.4.1 there is a Regular Expression Denial of Service vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of "\r\n" in SQL comments. Only the formatting feature that removes comments from SQL statements is affected by this regular expression. As a workaround, avoid using the sqlformat.format function with keyword strip_comments=True or the --strip-comments command line flag when using the sqlformat command line tool. https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-p5w8-wqhj-9hhf https://github.com/andialbrecht/sqlparse/commit/8238a9e450ed1524e40cb3a8b0b3c00606903aeb
sqlparse	0.4.1	<0.5.0	show Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.

Package

Installed

Affected

Info

sqlparse

0.4.1

>=0.1.15,<0.4.4

show

Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service).
https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2

sqlparse

0.4.1

>=0.4.0,<0.4.2

show

Sqlparse version 0.4.2 includes a fix for CVE-2021-32839: In sqlparse versions 0.4.0 and 0.4.1 there is a Regular Expression Denial of Service vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of "\r\n" in SQL comments. Only the formatting feature that removes comments from SQL statements is affected by this regular expression. As a workaround, avoid using the sqlformat.format function with keyword strip_comments=True or the --strip-comments command line flag when using the sqlformat command line tool.
https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-p5w8-wqhj-9hhf
https://github.com/andialbrecht/sqlparse/commit/8238a9e450ed1524e40cb3a8b0b3c00606903aeb

sqlparse

0.4.1

<0.5.0

show

Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.

pyup-update-boto3-1.18.38-to-1.18.41

4 years, 2 months ago

712d4173

Update boto3 from 1.18.38 to 1.18.41

sqlparse 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.4.1	>=0.1.15,<0.4.4	show Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service). https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2
sqlparse	0.4.1	>=0.4.0,<0.4.2	show Sqlparse version 0.4.2 includes a fix for CVE-2021-32839: In sqlparse versions 0.4.0 and 0.4.1 there is a Regular Expression Denial of Service vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of "\r\n" in SQL comments. Only the formatting feature that removes comments from SQL statements is affected by this regular expression. As a workaround, avoid using the sqlformat.format function with keyword strip_comments=True or the --strip-comments command line flag when using the sqlformat command line tool. https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-p5w8-wqhj-9hhf https://github.com/andialbrecht/sqlparse/commit/8238a9e450ed1524e40cb3a8b0b3c00606903aeb
sqlparse	0.4.1	<0.5.0	show Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.

Package

Installed

Affected

Info

sqlparse

0.4.1

>=0.1.15,<0.4.4

show

Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service).
https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2

sqlparse

0.4.1

>=0.4.0,<0.4.2

show

Sqlparse version 0.4.2 includes a fix for CVE-2021-32839: In sqlparse versions 0.4.0 and 0.4.1 there is a Regular Expression Denial of Service vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of "\r\n" in SQL comments. Only the formatting feature that removes comments from SQL statements is affected by this regular expression. As a workaround, avoid using the sqlformat.format function with keyword strip_comments=True or the --strip-comments command line flag when using the sqlformat command line tool.
https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-p5w8-wqhj-9hhf
https://github.com/andialbrecht/sqlparse/commit/8238a9e450ed1524e40cb3a8b0b3c00606903aeb

sqlparse

0.4.1

<0.5.0

show

Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.

pyup-update-botocore-1.21.38-to-1.21.40

4 years, 2 months ago

040683ad

Update botocore from 1.21.38 to 1.21.40

sqlparse 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.4.1	>=0.1.15,<0.4.4	show Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service). https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2
sqlparse	0.4.1	>=0.4.0,<0.4.2	show Sqlparse version 0.4.2 includes a fix for CVE-2021-32839: In sqlparse versions 0.4.0 and 0.4.1 there is a Regular Expression Denial of Service vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of "\r\n" in SQL comments. Only the formatting feature that removes comments from SQL statements is affected by this regular expression. As a workaround, avoid using the sqlformat.format function with keyword strip_comments=True or the --strip-comments command line flag when using the sqlformat command line tool. https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-p5w8-wqhj-9hhf https://github.com/andialbrecht/sqlparse/commit/8238a9e450ed1524e40cb3a8b0b3c00606903aeb
sqlparse	0.4.1	<0.5.0	show Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.

Package

Installed

Affected

Info

sqlparse

0.4.1

>=0.1.15,<0.4.4

show

Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service).
https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2

sqlparse

0.4.1

>=0.4.0,<0.4.2

show

Sqlparse version 0.4.2 includes a fix for CVE-2021-32839: In sqlparse versions 0.4.0 and 0.4.1 there is a Regular Expression Denial of Service vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of "\r\n" in SQL comments. Only the formatting feature that removes comments from SQL statements is affected by this regular expression. As a workaround, avoid using the sqlformat.format function with keyword strip_comments=True or the --strip-comments command line flag when using the sqlformat command line tool.
https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-p5w8-wqhj-9hhf
https://github.com/andialbrecht/sqlparse/commit/8238a9e450ed1524e40cb3a8b0b3c00606903aeb

sqlparse

0.4.1

<0.5.0

show

Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.