Safety CI > alpacahq/alpaca-trade-api-python

feature/statuses

3 years, 5 months ago

dbf18737

Add trading statuses

websockets 8.1 has known security vulnerabilities.

Package	Installed	Affected	Info
websockets	8.1	>=8.0,<9.1	show Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.
websockets	8.1	<10.0	show Websockets 10.0 includes a fix for a DoS vulnerability. https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

Package

Installed

Affected

Info

websockets

8.1

>=8.0,<9.1

show

Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.

websockets

8.1

<10.0

show

Websockets 10.0 includes a fix for a DoS vulnerability.
https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

extend-list-orders

3 years, 5 months ago

1f191ff4

extend list_orders functionality with symbols filtering

websockets 8.1 has known security vulnerabilities.

Package	Installed	Affected	Info
websockets	8.1	>=8.0,<9.1	show Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.
websockets	8.1	<10.0	show Websockets 10.0 includes a fix for a DoS vulnerability. https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

Package

Installed

Affected

Info

websockets

8.1

>=8.0,<9.1

show

Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.

websockets

8.1

<10.0

show

Websockets 10.0 includes a fix for a DoS vulnerability.
https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

support_close_partial_position

3 years, 5 months ago

253bd6d7

add support for closing partial position

websockets 8.1 has known security vulnerabilities.

Package	Installed	Affected	Info
websockets	8.1	>=8.0,<9.1	show Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.
websockets	8.1	<10.0	show Websockets 10.0 includes a fix for a DoS vulnerability. https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

Package

Installed

Affected

Info

websockets

8.1

>=8.0,<9.1

show

Websockets before 9.1 has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.

websockets

8.1

<10.0

show

Websockets 10.0 includes a fix for a DoS vulnerability.
https://github.com/aaugustin/websockets/commit/0a935b8ec16f4430ffe638cdbfbe45f6f9d7f684

fix-overnight-hold

3 years, 5 months ago

797d508a

fix example code to work with data v2