Safety CI > aguiardafa/projetopytools

pyup-scheduled-update-2024-06-17

1 year, 3 months ago

bbadd0fc

Update packaging from 24.0 to 24.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-06-17

1 year, 3 months ago

c06f87c1

Update coverage from 7.5.1 to 7.5.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-06-17

1 year, 3 months ago

7ac72872

Update requests from 2.31.0 to 2.32.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-06-10

1 year, 3 months ago

935db9fc

Update pytest from 8.2.0 to 8.2.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-06-10

1 year, 3 months ago

2736365b

Update zipp from 3.18.1 to 3.19.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-06-10

1 year, 3 months ago

ecda86d2

Update requests from 2.31.0 to 2.32.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-06-10

1 year, 3 months ago

f06ca492

Update coverage from 7.5.1 to 7.5.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-06-10

1 year, 3 months ago

1aed6d72

Update certifi from 2024.2.2 to 2024.6.2

requests 2.31.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.31.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.31.0	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

Package

Installed

Affected

Info

requests

2.31.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

requests

2.31.0

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

pyup-scheduled-update-2024-06-10

1 year, 3 months ago

966006a5

Update packaging from 24.0 to 24.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-06-03

1 year, 4 months ago

7d1372f1

Update zipp from 3.18.1 to 3.19.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-06-03

1 year, 4 months ago

cc3eb6ec

Update coverage from 7.5.1 to 7.5.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-06-03

1 year, 4 months ago

84c6d669

Update pytest from 8.2.0 to 8.2.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-06-03

1 year, 4 months ago

55f9773d

Update requests from 2.31.0 to 2.32.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-06-03

1 year, 4 months ago

a6dfdb98

Update certifi from 2024.2.2 to 2024.6.2

requests 2.31.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.31.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.31.0	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

Package

Installed

Affected

Info

requests

2.31.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

requests

2.31.0

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

pyup-scheduled-update-2024-05-27

1 year, 4 months ago

2adbd0bd

Update coverage from 7.5.1 to 7.5.2

No dependencies with known security vulnerabilities.