Safety CI > alexyorke/installed-to-chocolatey

pyup-scheduled-update-2025-07-09

1 week ago

1feff7f0

Update requests from 2.32.3 to 2.32.4

No dependencies with known security vulnerabilities.

dependabot/pip/pip-512858e340

1 month, 1 week ago

5d9fab62

Bump requests from 2.32.3 to 2.32.4 in the pip group Bumps the pip group with 1 update: [requests](

No dependencies with known security vulnerabilities.

master

4 months ago

55e052c1

Merge pull request #24 from alexyorke/dependabot/pip/feedparser-6.0.11 Bump feedparser from 5.2.1 t

No dependencies with known security vulnerabilities.

dependabot/pip/feedparser-6.0.11

4 months, 2 weeks ago

dcc5d060

Bump feedparser from 5.2.1 to 6.0.11 Bumps [feedparser](https://github.com/kurtmckee/feedparser) fr

No dependencies with known security vulnerabilities.

dependabot/pip/feedparser-6.0.11

4 months, 2 weeks ago

a83c1eb4

Bump feedparser from 5.2.1 to 6.0.11 Bumps [feedparser](https://github.com/kurtmckee/feedparser) fr

No dependencies with known security vulnerabilities.

master

4 months, 2 weeks ago

11ac1fcb

Merge pull request #25 from alexyorke/dependabot/pip/requests-2.32.3 Bump requests from 2.22.0 to 2

No dependencies with known security vulnerabilities.

master

4 months, 2 weeks ago

553c7a1d

Merge pull request #26 from alexyorke/pyup-scheduled-update-2025-03-01 Scheduled monthly dependency

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2025-03-01

4 months, 2 weeks ago

b1f77b2c

Update requests from 2.22.0 to 2.32.3

No dependencies with known security vulnerabilities.

dependabot/pip/requests-2.32.3

4 months, 2 weeks ago

94ce87f8

Bump requests from 2.22.0 to 2.32.3 Bumps [requests](https://github.com/psf/requests) from 2.22.0 t

No dependencies with known security vulnerabilities.

dependabot/pip/feedparser-6.0.11

4 months, 2 weeks ago

92cdda38

Bump feedparser from 5.2.1 to 6.0.11 Bumps [feedparser](https://github.com/kurtmckee/feedparser) fr

requests 2.22.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.22.0	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.22.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.22.0	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

Package

Installed

Affected

Info

requests

2.22.0

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

requests

2.22.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

requests

2.22.0

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

master

4 months, 2 weeks ago

ac844e4f

Update dependabot.yml

requests 2.22.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.22.0	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.22.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.22.0	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

Package

Installed

Affected

Info

requests

2.22.0

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

requests

2.22.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

requests

2.22.0

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

master

4 months, 2 weeks ago

774fb18c

Create dependabot.yml

requests 2.22.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.22.0	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.22.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.22.0	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

Package

Installed

Affected

Info

requests

2.22.0

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

requests

2.22.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

requests

2.22.0

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

pyup-scheduled-update-2025-02-01

5 months, 2 weeks ago

ecbb96d4

Update requests from 2.22.0 to 2.32.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2025-01-01

6 months, 2 weeks ago

09641b33

Update requests from 2.22.0 to 2.32.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-12-01

7 months, 2 weeks ago

201b7b61

Update requests from 2.22.0 to 2.32.3

No dependencies with known security vulnerabilities.