Safety CI > alshapton/SpacePY-X

pyup-update-setuptools-48.0.0-to-66.1.0

2 years, 2 months ago

7d630da9

Update setuptools from 48.0.0 to 66.1.0

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-66.0.0

2 years, 2 months ago

c0098529

Update setuptools from 48.0.0 to 66.0.0

No dependencies with known security vulnerabilities.

pyup-update-tinydb-4.1.1-to-4.7.1

2 years, 2 months ago

98dc0089

Update tinydb from 4.1.1 to 4.7.1

setuptools 48.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	48.0.0	<70.0.0	show Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
setuptools	48.0.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

Package

Installed

Affected

Info

setuptools

48.0.0

<70.0.0

show

Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.

setuptools

48.0.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

pyup-update-requests-2.24.0-to-2.28.2

2 years, 2 months ago

60b96b28

Update requests from 2.24.0 to 2.28.2

setuptools 48.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	48.0.0	<70.0.0	show Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
setuptools	48.0.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

Package

Installed

Affected

Info

setuptools

48.0.0

<70.0.0

show

Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.

setuptools

48.0.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

pyup-update-setuptools-48.0.0-to-65.7.0

2 years, 2 months ago

c601c49c

Update setuptools from 48.0.0 to 65.7.0

No dependencies with known security vulnerabilities.

snyk-fix-7ab0cde1d283ecad490fabd93cd48e5e

2 years, 3 months ago

57770a20

fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-65.6.3

2 years, 4 months ago

099a8161

Update setuptools from 48.0.0 to 65.6.3

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-65.6.2

2 years, 4 months ago

348c4402

Update setuptools from 48.0.0 to 65.6.2

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-65.6.1

2 years, 4 months ago

5e59ed8b

Update setuptools from 48.0.0 to 65.6.1

No dependencies with known security vulnerabilities.

snyk-fix-f2ab9f4ea469515061cf969e88071a91

2 years, 4 months ago

a4e5cfa2

fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-65.6.0

2 years, 4 months ago

5e2ce49e

Update setuptools from 48.0.0 to 65.6.0

No dependencies with known security vulnerabilities.

pyup-update-sphinx_rtd_theme-0.5.0-to-1.1.1

2 years, 5 months ago

ad20956e

Update sphinx_rtd_theme from 0.5.0 to 1.1.1

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-65.5.1

2 years, 5 months ago

63c713a2

Update setuptools from 48.0.0 to 65.5.1

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-65.5.0

2 years, 5 months ago

4974f43d

Update setuptools from 48.0.0 to 65.5.0

No dependencies with known security vulnerabilities.

pyup-update-setuptools-48.0.0-to-65.4.1

2 years, 6 months ago

617e5a5e

Update setuptools from 48.0.0 to 65.4.1

No dependencies with known security vulnerabilities.