Safety CI > alphagov/notifications-api

send_complaints_to_service_teams

8 years, 1 month ago

af9b1f63

Add callback_type column to service_callback_api table Also add service_callback_type table with al

PyYAML 3.12 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.12

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.12

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

send_complaints_to_service_teams

8 years, 1 month ago

40c82fb4

Add callback_type column to service_callback_api table Also add service_callback_type table with al

PyYAML 3.12 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.12

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.12

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

master

8 years, 1 month ago

9c99e450

Merge pull request #1945 from alphagov/flexible-data-retention Flexible data retention

PyYAML 3.12 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.12

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.12

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

research-letter-time

8 years, 1 month ago

09fc90ad

make test dvla response file timestamps in a random order since there'll be a bunch of threads runn

No dependencies with known security vulnerabilities.

master

8 years, 1 month ago

081c7c70

Merge pull request #1957 from alphagov/quis-patch-1 Bump utils to fix smart quotes in email address

No dependencies with known security vulnerabilities.

quis-patch-1

8 years, 1 month ago

222dc3fe

Use debian jessie instead of stretch until npm is installed differently

No dependencies with known security vulnerabilities.

quis-patch-1

8 years, 1 month ago

b6961996

Use debian jessie instead of stretch until npm is installed differently

No dependencies with known security vulnerabilities.

docker-compose

8 years, 1 month ago

9b88f712

WIP Use docker-compose to clean up postgres container after test run

No dependencies with known security vulnerabilities.

quis-patch-1

8 years, 1 month ago

89d20033

Bump utils to fix smart quotes in email addresses Brings in: - [ ] https://github.com/alphagov/not

No dependencies with known security vulnerabilities.

notification-serialize-includes-sender

8 years, 1 month ago

28cd96cf

Include the notification sender name when serializing notifications The `serialize` method of the N

Server Error.

master

8 years, 1 month ago

48d1e816

Merge pull request #1943 from alphagov/admin_platform_users_search Add data endpoint for finding us

No dependencies with known security vulnerabilities.

pyup-update-pyyaml-3.12-to-3.13

8 years, 1 month ago

73b0fc00

Update pyyaml from 3.12 to 3.13

No dependencies with known security vulnerabilities.

pyup-update-python-json-logger-0.1.8-to-0.1.9

8 years, 1 month ago

859866b4

Update python-json-logger from 0.1.8 to 0.1.9

No dependencies with known security vulnerabilities.

pyup-update-phonenumbers-8.9.4-to-8.9.10

8 years, 1 month ago

5a1cdc09

Update phonenumbers from 8.9.4 to 8.9.10

No dependencies with known security vulnerabilities.

pyup-update-kombu-3.0.37-to-4.2.1

8 years, 1 month ago

2b95f6c8

Update kombu from 3.0.37 to 4.2.1

No dependencies with known security vulnerabilities.