Safety CI > alshapton/SpacePY-X

pyup-update-setuptools-48.0.0-to-67.6.1

2 years ago

213b7e4d

Update setuptools from 48.0.0 to 67.6.1

No dependencies with known security vulnerabilities.

pyup-update-beautifulsoup4-4.9.1-to-4.12.0

2 years ago

7e9b1bf4

Update beautifulsoup4 from 4.9.1 to 4.12.0

setuptools 48.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	48.0.0	<70.0.0	show Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
setuptools	48.0.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

Package

Installed

Affected

Info

setuptools

48.0.0

<70.0.0

show

Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.

setuptools

48.0.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

pyup-update-setuptools-48.0.0-to-67.6.0

2 years ago

7ceef97d

Update setuptools from 48.0.0 to 67.6.0

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-67.5.1

2 years ago

8c11b2ac

Update setuptools from 48.0.0 to 67.5.1

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-67.5.0

2 years ago

389bc369

Update setuptools from 48.0.0 to 67.5.0

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-67.4.0

2 years, 1 month ago

4a9ae95f

Update setuptools from 48.0.0 to 67.4.0

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-67.3.3

2 years, 1 month ago

b40f1fe3

Update setuptools from 48.0.0 to 67.3.3

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-67.3.2

2 years, 1 month ago

0145ced5

Update setuptools from 48.0.0 to 67.3.2

No dependencies with known security vulnerabilities.

pyup-update-sphinx_rtd_theme-0.5.0-to-1.2.0

2 years, 1 month ago

0060dcf7

Update sphinx_rtd_theme from 0.5.0 to 1.2.0

setuptools 48.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	48.0.0	<70.0.0	show Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
setuptools	48.0.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

Package

Installed

Affected

Info

setuptools

48.0.0

<70.0.0

show

Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.

setuptools

48.0.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

pyup-update-setuptools-48.0.0-to-67.3.1

2 years, 1 month ago

def4e4f7

Update setuptools from 48.0.0 to 67.3.1

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-67.2.0

2 years, 1 month ago

a14311e1

Update setuptools from 48.0.0 to 67.2.0

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-67.1.0

2 years, 2 months ago

c866262f

Update setuptools from 48.0.0 to 67.1.0

No dependencies with known security vulnerabilities.

pyup-update-beautifulsoup4-4.9.1-to-4.11.2

2 years, 2 months ago

eb5ede7e

Update beautifulsoup4 from 4.9.1 to 4.11.2

setuptools 48.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	48.0.0	<70.0.0	show Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
setuptools	48.0.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

Package

Installed

Affected

Info

setuptools

48.0.0

<70.0.0

show

Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.

setuptools

48.0.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

pyup-update-setuptools-48.0.0-to-67.0.0

2 years, 2 months ago

69442743

Update setuptools from 48.0.0 to 67.0.0

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-66.1.1

2 years, 2 months ago

86a25c41

Update setuptools from 48.0.0 to 66.1.1

No dependencies with known security vulnerabilities.