Safety CI > aguiardafa/projetodjango

master

5 years, 4 months ago

a7926c41

Merge pull request #668 from aguiardafa/pyup-update-django-storages-1.10.1-to-1.11 Update django-st

No dependencies with known security vulnerabilities.

master

5 years, 4 months ago

f45f5398

Merge pull request #667 from aguiardafa/pyup-update-botocore-1.19.36-to-1.19.38 Update botocore to

No dependencies with known security vulnerabilities.

master

5 years, 4 months ago

62d9ea70

Merge pull request #666 from aguiardafa/pyup-update-boto3-1.16.36-to-1.16.38 Update boto3 to 1.16.3

No dependencies with known security vulnerabilities.

master

5 years, 4 months ago

9e29a070

Merge pull request #665 from aguiardafa/pyup-update-requests-2.25.0-to-2.25.1 Update requests to 2.

No dependencies with known security vulnerabilities.

pyup-update-django-storages-1.10.1-to-1.11

5 years, 4 months ago

e6f01579

Update django-storages from 1.10.1 to 1.11

No dependencies with known security vulnerabilities.

pyup-update-botocore-1.19.36-to-1.19.38

5 years, 4 months ago

51de0e47

Update botocore from 1.19.36 to 1.19.38

No dependencies with known security vulnerabilities.

pyup-update-boto3-1.16.36-to-1.16.38

5 years, 4 months ago

24c8c08c

Update boto3 from 1.16.36 to 1.16.38

No dependencies with known security vulnerabilities.

pyup-update-requests-2.25.0-to-2.25.1

5 years, 4 months ago

cfd118da

Update requests from 2.25.0 to 2.25.1

No dependencies with known security vulnerabilities.

pyup-update-botocore-1.19.36-to-1.19.37

5 years, 4 months ago

0f35ccda

Update botocore from 1.19.36 to 1.19.37

No dependencies with known security vulnerabilities.

pyup-update-boto3-1.16.36-to-1.16.37

5 years, 4 months ago

ea9a639c

Update boto3 from 1.16.36 to 1.16.37

No dependencies with known security vulnerabilities.

master

5 years, 4 months ago

c0249484

Merge pull request #662 from aguiardafa/pyup-update-pytest-6.1.2-to-6.2.1 Update pytest to 6.2.1

No dependencies with known security vulnerabilities.

master

5 years, 4 months ago

b8f69110

Merge pull request #661 from aguiardafa/pyup-update-botocore-1.19.33-to-1.19.36 Update botocore to

No dependencies with known security vulnerabilities.

master

5 years, 4 months ago

5d6e9f53

Merge pull request #660 from aguiardafa/pyup-update-boto3-1.16.33-to-1.16.36 Update boto3 to 1.16.3

No dependencies with known security vulnerabilities.

master

5 years, 4 months ago

781d5dc3

Merge pull request #659 from aguiardafa/pyup-update-importlib-metadata-3.1.1-to-3.3.0 Update import

No dependencies with known security vulnerabilities.

pyup-update-pytest-6.1.2-to-6.2.1

5 years, 4 months ago

3423604a

Update pytest from 6.1.2 to 6.2.1

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.