Safety CI > amor71/LiuAlgoTrader

pyup/scheduled-update-2022-02-21

4 years, 4 months ago

1a0171c1

Update mnqueues from 0.0.35 to 0.0.37

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2022-02-21

4 years, 4 months ago

085d8a71

Update mnqueues from 0.0.35 to 0.0.37

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2022-02-21

4 years, 4 months ago

0c08fba2

Update quantstats from 0.0.48 to 0.0.50

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2022-02-21

4 years, 4 months ago

53266803

Update quantstats from 0.0.48 to 0.0.50

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2022-02-21

4 years, 4 months ago

575b8f01

Update finnhub-python from 2.4.9 to 2.4.10

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2022-02-21

4 years, 4 months ago

b3448cb6

Update finnhub-python from 2.4.9 to 2.4.10

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2022-02-21

4 years, 4 months ago

ef36c0e1

Update setuptools from 60.9.0 to 60.9.3

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2022-02-21

4 years, 4 months ago

f51fe503

Update cython from 0.29.27 to 0.29.28

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2022-02-21

4 years, 4 months ago

07bb893f

Update hypothesis from 6.36.2 to 6.37.1

No dependencies with known security vulnerabilities.

al/momentum-fixes

4 years, 4 months ago

f25b4b30

Stop empty tickers being passed and Fix Alpaca data load - Tickers with missing attributes would ca

No dependencies with known security vulnerabilities.

ap-momentum-fixes

4 years, 4 months ago

538ccec4

Fix for issue #286 where scanner runner Fix for issue #286 where scanner runner is still enforcing

No dependencies with known security vulnerabilities.

master

4 years, 4 months ago

90b3ffdf

Merge pull request #310 from ksilo/ksilo-feature General idea of contextvars in Strategy class

No dependencies with known security vulnerabilities.

refs/tags/v0.4.13

4 years, 4 months ago

64f15ba2

1. fix tests 2. fix requirements 3. adding doc for release 4. bump version

No dependencies with known security vulnerabilities.

master

4 years, 4 months ago

f01e31ed

Merge pull request #311 from amor71/pyup/scheduled-update-2022-02-14 PYUP Scheduled weekly dependen

No dependencies with known security vulnerabilities.

master

4 years, 4 months ago

25123fe0

remote debug print

numpy 1.22.1 and numpy 1.22.1 have known security vulnerabilities.

Package	Installed	Affected	Info
numpy	1.22.1	>=1.4.1,<1.22.2	show Numpy 1.22.2 includes a fix for CVE-2021-41495: Null Pointer Dereference vulnerability exists in numpy.sort in NumPy in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place. NOTE2: The specs we include in this advisory differ from the publicly available on other sources. For example, the advisory posted by the NVD indicate that versions up to and including 1.19.0 are affected. However, research by Safety CLI Cybersecurity confirms that the vulnerability remained unaddressed until version 1.22.2.
numpy	1.22.1	>=1.4.1,<1.22.2	show Numpy 1.22.2 includes a fix for CVE-2021-41495: Null Pointer Dereference vulnerability exists in numpy.sort in NumPy in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place. NOTE2: The specs we include in this advisory differ from the publicly available on other sources. For example, the advisory posted by the NVD indicate that versions up to and including 1.19.0 are affected. However, research by Safety CLI Cybersecurity confirms that the vulnerability remained unaddressed until version 1.22.2.

Package

Installed

Affected

Info

numpy

1.22.1

>=1.4.1,<1.22.2

show

Numpy 1.22.2  includes a fix for CVE-2021-41495: Null Pointer Dereference vulnerability exists in numpy.sort in NumPy in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. 
NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place.
NOTE2: The specs we include in this advisory differ from the publicly available on other sources. For example, the advisory posted by the NVD indicate that versions up to and including 1.19.0 are affected. However, research by Safety CLI Cybersecurity confirms that the vulnerability remained unaddressed until version 1.22.2.

numpy

1.22.1

>=1.4.1,<1.22.2

show

Numpy 1.22.2  includes a fix for CVE-2021-41495: Null Pointer Dereference vulnerability exists in numpy.sort in NumPy in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. 
NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place.
NOTE2: The specs we include in this advisory differ from the publicly available on other sources. For example, the advisory posted by the NVD indicate that versions up to and including 1.19.0 are affected. However, research by Safety CLI Cybersecurity confirms that the vulnerability remained unaddressed until version 1.22.2.