Safety CI > alpacahq/alpaca-trade-api-python

master

3 years, 5 months ago

a1a341c6

Merge pull request #448 from JohnStrunk226/master Fix account typo

No dependencies with known security vulnerabilities.

master

3 years, 5 months ago

9745c278

Merge pull request #451 from alpacahq/fix-websocket-retry Try to consume again when we get a connec

No dependencies with known security vulnerabilities.

fix-websocket-retry

3 years, 5 months ago

91edc27e

add note about the websockets library version

No dependencies with known security vulnerabilities.

feature/statuses

3 years, 5 months ago

fb4088c4

add note about the websockets library version

No dependencies with known security vulnerabilities.

extend-list-orders

3 years, 5 months ago

9f873c53

add note about the websockets library version

No dependencies with known security vulnerabilities.

support_close_partial_position

3 years, 5 months ago

ed9e5f78

add note about the websockets library version

No dependencies with known security vulnerabilities.

fix-overnight-hold

3 years, 5 months ago

d3541897

add a comment about get_barset() and get_bars()

No dependencies with known security vulnerabilities.

master

3 years, 5 months ago

f7f38d80

Merge pull request #439 from alpacahq/update-websockets Update the websockets package

No dependencies with known security vulnerabilities.

update-websockets

3 years, 5 months ago

4354650c

add note about the websockets library version

No dependencies with known security vulnerabilities.

fix-websocket-retry

3 years, 5 months ago

b649fb40

try to consume again when we get a connection error (3 retries by default) the way it was - there w

websockets 8.1 has known security vulnerabilities.

Package	Installed	Affected	Info
websockets	8.1	>=8.0,<9.1	show Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.
websockets	8.1	<10.0	show Websockets 10.0 includes a fix for a DoS vulnerability. https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

Package

Installed

Affected

Info

websockets

8.1

>=8.0,<9.1

show

Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.

websockets

8.1

<10.0

show

Websockets 10.0 includes a fix for a DoS vulnerability.
https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

pyup-scheduled-update-2021-06-14

3 years, 5 months ago

0541fabc

Pin websockets to latest version 9.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-06-14

3 years, 5 months ago

708e5df5

Pin websocket-client to latest version 1.1.0

websockets 8.1 has known security vulnerabilities.

Package	Installed	Affected	Info
websockets	8.1	>=8.0,<9.1	show Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.
websockets	8.1	<10.0	show Websockets 10.0 includes a fix for a DoS vulnerability. https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

Package

Installed

Affected

Info

websockets

8.1

>=8.0,<9.1

show

Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.

websockets

8.1

<10.0

show

Websockets 10.0 includes a fix for a DoS vulnerability.
https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

pyup-scheduled-update-2021-06-14

3 years, 5 months ago

0dda5648

Pin numpy to latest version 1.20.3

websockets 8.1 has known security vulnerabilities.

Package	Installed	Affected	Info
websockets	8.1	>=8.0,<9.1	show Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.
websockets	8.1	<10.0	show Websockets 10.0 includes a fix for a DoS vulnerability. https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

Package

Installed

Affected

Info

websockets

8.1

>=8.0,<9.1

show

Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.

websockets

8.1

<10.0

show

Websockets 10.0 includes a fix for a DoS vulnerability.
https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

pyup-scheduled-update-2021-06-14

3 years, 5 months ago

b6af5398

Pin pandas to latest version 1.2.4

websockets 8.1 has known security vulnerabilities.

Package	Installed	Affected	Info
websockets	8.1	>=8.0,<9.1	show Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.
websockets	8.1	<10.0	show Websockets 10.0 includes a fix for a DoS vulnerability. https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

Package

Installed

Affected

Info

websockets

8.1

>=8.0,<9.1

show

Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.

websockets

8.1

<10.0

show

Websockets 10.0 includes a fix for a DoS vulnerability.
https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

feature/statuses

3 years, 5 months ago

0e1ea60c

fix mapping

websockets 8.1 has known security vulnerabilities.

Package	Installed	Affected	Info
websockets	8.1	>=8.0,<9.1	show Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.
websockets	8.1	<10.0	show Websockets 10.0 includes a fix for a DoS vulnerability. https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

Package

Installed

Affected

Info

websockets

8.1

>=8.0,<9.1

show

Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.

websockets

8.1

<10.0

show

Websockets 10.0 includes a fix for a DoS vulnerability.
https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684