Safety CI > apihackers/docker-pelican

master

3 years, 7 months ago

9b8e5f12

Merge pull request #114 from apihackers/pyup/update-weasyprint-51-to-53.3 [PyUP] Update weasyprint

No dependencies with known security vulnerabilities.

master

3 years, 7 months ago

2014e829

Merge pull request #111 from apihackers/pyup/update-pygments-2.6.1-to-2.10.0 [PyUP] Update pygments

No dependencies with known security vulnerabilities.

pyup/update-pygments-2.6.1-to-2.10.0

3 years, 7 months ago

2cefeb95

Merge branch 'master' into pyup/update-pygments-2.6.1-to-2.10.0

No dependencies with known security vulnerabilities.

master

3 years, 7 months ago

7bcedb07

Merge pull request #109 from apihackers/pyup/update-cython-0.29.16-to-0.29.24 [PyUP] Update cython

No dependencies with known security vulnerabilities.

pyup/update-cython-0.29.16-to-0.29.24

3 years, 7 months ago

a0426705

Merge branch 'master' into pyup/update-cython-0.29.16-to-0.29.24

No dependencies with known security vulnerabilities.

master

3 years, 7 months ago

d15fe023

Merge pull request #108 from apihackers/pyup/update-invoke-1.4.1-to-1.6.0 [PyUP] Update invoke to 1

No dependencies with known security vulnerabilities.

pyup/update-invoke-1.4.1-to-1.6.0

3 years, 7 months ago

8b53d085

Merge branch 'master' into pyup/update-invoke-1.4.1-to-1.6.0

No dependencies with known security vulnerabilities.

master

3 years, 7 months ago

4e6826e2

Merge pull request #107 from apihackers/pyup/update-feedparser-5.2.1-to-6.0.8 [PyUP] Update feedpar

No dependencies with known security vulnerabilities.

master

3 years, 7 months ago

e37591de

Merge pull request #100 from apihackers/pyup/update-babel-2.8.0-to-2.9.1 [PyUP] Update babel to 2.9

No dependencies with known security vulnerabilities.

master

3 years, 7 months ago

1b20f929

Merge pull request #94 from apihackers/pyup/update-markdown-3.2.1-to-3.3.4 [PyUP] Update markdown t

No dependencies with known security vulnerabilities.

master

3 years, 7 months ago

43521027

Merge pull request #91 from apihackers/pyup/update-pyyaml-5.3.1-to-5.4.1 [PyUP] Update pyyaml to 5.

No dependencies with known security vulnerabilities.

pyup/update-pelican-4.2.0-to-4.7.0

3 years, 7 months ago

60d5e919

Update pelican from 4.2.0 to 4.7.0

pyyaml 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
pyyaml	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

pyyaml

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

pyup/update-feedgenerator-1.9.1-to-2.0.0

3 years, 7 months ago

ae5ae3e3

Update feedgenerator from 1.9.1 to 2.0.0

pyyaml 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
pyyaml	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

pyyaml

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

pyup/update-weasyprint-51-to-53.3

3 years, 7 months ago

ee15f69b

Update weasyprint from 51 to 53.3

pyyaml 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
pyyaml	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

pyyaml

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

pyup/update-weasyprint-51-to-53.1

3 years, 8 months ago

f4253ed0

Update weasyprint from 51 to 53.1

pyyaml 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
pyyaml	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

pyyaml

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466