Safety CI > ainich/politraf

pyup-update-vulners-1.1.1-to-1.3.1

7 years, 7 months ago

8679ec1c

Update vulners from 1.1.1 to 1.3.1

No dependencies with known security vulnerabilities.

pyup-update-psutil-5.4.6-to-5.4.7

7 years, 7 months ago

5332448c

Update psutil from 5.4.6 to 5.4.7

No dependencies with known security vulnerabilities.

pyup-update-infi.clickhouse_orm-1.0.0-to-1.0.1

7 years, 7 months ago

d88684b5

Update infi.clickhouse_orm from 1.0.0 to 1.0.1

No dependencies with known security vulnerabilities.

pyup-update-vulners-1.1.1-to-1.3.0

7 years, 8 months ago

0c30ebab

Update vulners from 1.1.1 to 1.3.0

No dependencies with known security vulnerabilities.

pyup-update-vulners-1.1.1-to-1.2.1

7 years, 8 months ago

8d9afbb4

Update vulners from 1.1.1 to 1.2.1

pyyaml 3.13 has known security vulnerabilities.

Package	Installed	Affected	Info
pyyaml	3.13	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
pyyaml	3.13	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

pyyaml

3.13

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

pyyaml

3.13

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-update-vulners-1.1.1-to-1.2.0

7 years, 8 months ago

29363e40

Update vulners from 1.1.1 to 1.2.0

pyyaml 3.13 has known security vulnerabilities.

Package	Installed	Affected	Info
pyyaml	3.13	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
pyyaml	3.13	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

pyyaml

3.13

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

pyyaml

3.13

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-update-vulners-1.1.1-to-1.1.3

7 years, 8 months ago

8de551c2

Update vulners from 1.1.1 to 1.1.3

pyyaml 3.13 has known security vulnerabilities.

Package	Installed	Affected	Info
pyyaml	3.13	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
pyyaml	3.13	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

pyyaml

3.13

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

pyyaml

3.13

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

master

7 years, 9 months ago

d5aa1aef

Update .gitlab-ci.yml

No dependencies with known security vulnerabilities.

master

7 years, 9 months ago

57e18d56

Update .gitlab-ci.yml

No dependencies with known security vulnerabilities.

master

7 years, 9 months ago

31dcd586

Add new directory

No dependencies with known security vulnerabilities.

master

7 years, 9 months ago

b2ad4ad3

modified: Dockerfile

No dependencies with known security vulnerabilities.

master

7 years, 9 months ago

ae231201

modified: Dockerfile

No dependencies with known security vulnerabilities.

master

7 years, 9 months ago

d370b362

modified: Dockerfile modified: dbmodels.py modified: install_for_docker.py

No dependencies with known security vulnerabilities.

master

7 years, 9 months ago

b5654b6e

modified: Dockerfile

No dependencies with known security vulnerabilities.

master

7 years, 9 months ago

335f593a

modified: Dockerfile modified: install_for_docker.py

No dependencies with known security vulnerabilities.