Safety CI > bubylou/scsm

pyup-scheduled-update-2023-03-01

1 year, 2 months ago

fa8d4626

Update ruamel.yaml from 0.17.17 to 0.17.21

setuptools 59.4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-03-01

1 year, 2 months ago

e51d5355

Update setuptools from 59.4.0 to 67.4.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-03-01

1 year, 2 months ago

91a904c1

Update pytest from 6.2.5 to 7.2.1

setuptools 59.4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-03-01

1 year, 2 months ago

599cf4e1

Update flake8 from 4.0.1 to 6.0.0

libtmux 0.10.2 and setuptools 59.4.0 have known security vulnerabilities.

Package	Installed	Affected	Info
libtmux	0.10.2	<0.11.0	show Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

libtmux

0.10.2

<0.11.0

show

Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-03-01

1 year, 2 months ago

65413c9a

Update libtmux from 0.10.2 to 0.21.0

setuptools 59.4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-03-01

1 year, 2 months ago

abbd5d99

Update coverage from 6.2 to 7.2.1

libtmux 0.10.2 and setuptools 59.4.0 have known security vulnerabilities.

Package	Installed	Affected	Info
libtmux	0.10.2	<0.11.0	show Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

libtmux

0.10.2

<0.11.0

show

Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-03-01

1 year, 2 months ago

2cd954f0

Update click from 8.0.3 to 8.1.3

libtmux 0.10.2 and setuptools 59.4.0 have known security vulnerabilities.

Package	Installed	Affected	Info
libtmux	0.10.2	<0.11.0	show Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

libtmux

0.10.2

<0.11.0

show

Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-02-01

1 year, 3 months ago

ee7e2866

Update tox from 3.24.4 to 4.4.4

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

1 year, 3 months ago

e44edd15

Update setuptools from 59.4.0 to 67.0.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

1 year, 3 months ago

4a5b5828

Update ruamel.yaml from 0.17.17 to 0.17.21

setuptools 59.4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-02-01

1 year, 3 months ago

2d0a506e

Update pytest from 6.2.5 to 7.2.1

setuptools 59.4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-02-01

1 year, 3 months ago

3985489d

Update libtmux from 0.10.2 to 0.21.0

setuptools 59.4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-02-01

1 year, 3 months ago

fdc1b63d

Update coverage from 6.2 to 7.1.0

libtmux 0.10.2 and setuptools 59.4.0 have known security vulnerabilities.

Package	Installed	Affected	Info
libtmux	0.10.2	<0.11.0	show Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

libtmux

0.10.2

<0.11.0

show

Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-02-01

1 year, 3 months ago

1626520b

Update flake8 from 4.0.1 to 6.0.0

libtmux 0.10.2 and setuptools 59.4.0 have known security vulnerabilities.

Package	Installed	Affected	Info
libtmux	0.10.2	<0.11.0	show Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

libtmux

0.10.2

<0.11.0

show

Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-02-01

1 year, 3 months ago

92e85aa8

Update click from 8.0.3 to 8.1.3

libtmux 0.10.2 and setuptools 59.4.0 have known security vulnerabilities.

Package	Installed	Affected	Info
libtmux	0.10.2	<0.11.0	show Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.
setuptools	59.4.0	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

libtmux

0.10.2

<0.11.0

show

Libtmux 0.11.0 updates its dependency 'brotly' to versions >=1.0.9 to include a security fix.

setuptools

59.4.0

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages