Safety CI > bubylou/scsm

master

1 year ago

6714f894

Update libtmux to lastest with new API

No dependencies with known security vulnerabilities.

master

1 year ago

bd9f9f79

Update libtmux to lastest with new API

No dependencies with known security vulnerabilities.

master

1 year ago

db8c86f3

Merge pull request #54 from TrellixVulnTeam/master CVE-2007-4559 Patch

No dependencies with known security vulnerabilities.

master

1 year ago

65de6be2

Switch to Poetry

No dependencies with known security vulnerabilities.

master

1 year ago

574b98c8

Switch to Poetry

No dependencies with known security vulnerabilities.

master

1 year ago

a58e1371

Switch to Poetry

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-04-01

1 year, 1 month ago

6aa01fc4

Update tox from 3.24.4 to 4.4.8

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-04-01

1 year, 1 month ago

d4a6bd09

Update setuptools from 59.4.0 to 67.6.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-04-01

1 year, 1 month ago

536eefbe

Update libtmux from 0.10.2 to 0.21.0

setuptools 59.4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-04-01

1 year, 1 month ago

4d9cc168

Update ruamel.yaml from 0.17.17 to 0.17.21

setuptools 59.4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-04-01

1 year, 1 month ago

3e4a723b

Update pytest from 6.2.5 to 7.2.2

setuptools 59.4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-04-01

1 year, 1 month ago

fd1bf284

Update flake8 from 4.0.1 to 6.0.0

libtmux 0.10.2 and setuptools 59.4.0 have known security vulnerabilities.

Package	Installed	Affected	Info
libtmux	0.10.2	<0.11.0	show Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

libtmux

0.10.2

<0.11.0

show

Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-04-01

1 year, 1 month ago

552933c9

Update coverage from 6.2 to 7.2.2

libtmux 0.10.2 and setuptools 59.4.0 have known security vulnerabilities.

Package	Installed	Affected	Info
libtmux	0.10.2	<0.11.0	show Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

libtmux

0.10.2

<0.11.0

show

Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-04-01

1 year, 1 month ago

224c74dd

Update click from 8.0.3 to 8.1.3

libtmux 0.10.2 and setuptools 59.4.0 have known security vulnerabilities.

Package	Installed	Affected	Info
libtmux	0.10.2	<0.11.0	show Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

libtmux

0.10.2

<0.11.0

show

Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-03-01

1 year, 2 months ago

4e9adfc9

Update tox from 3.24.4 to 4.4.6

No dependencies with known security vulnerabilities.