Safety CI > chopdgd/django-genome

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

c56a9bd2

Update django-test-plus from 1.3.1 to 2.2.4

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

ce88cc39

Update django-coverage-plugin from 1.6.0 to 3.1.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

9e1e6262

Update pytest-sugar from 0.9.2 to 1.0.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

0e8da475

Update pytest-django from 3.6.0 to 4.9.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

81149c96

Update tox from 3.14.0 to 4.21.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

c44a3e75

Update codecov from 2.0.15 to 2.1.13

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

7bc8fecb

Update flake8 from 3.7.9 to 7.1.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

a55bb2e2

Update pytest-cov from 2.8.1 to 5.0.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

c6f79a6c

Update pytest from 5.2.2 to 8.3.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

11c7f7de

Update mock from 3.0.5 to 5.1.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

c9fe985b

Update coverage from 4.5.4 to 7.6.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

ccb0cd93

Update autopep8 from 1.4.4 to 2.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

720c0114

Update sphinx-rtd-theme from 0.4.3 to 3.0.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

61de7062

Update twine from 2.0.0 to 5.1.1

Sphinx 2.2.1 has known security vulnerabilities.

Package	Installed	Affected	Info
Sphinx	2.2.1	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.
Sphinx	2.2.1	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.
Sphinx	2.2.1	<3.3.0	show Sphinx 3.3.0 includes a fix for a ReDoS vulnerability in inventory. https://github.com/sphinx-doc/sphinx/issues/8175 https://github.com/sphinx-doc/sphinx/commit/f7b872e673f9b359a61fd287a7338a28077840d2
Sphinx	2.2.1	<3.3.0	show Sphinx 3.3.0 includes a fix for a ReDoS vulnerability in docstring. https://github.com/sphinx-doc/sphinx/issues/8172 https://github.com/sphinx-doc/sphinx/commit/f00e75278c5999f40b214d8934357fbf0e705417

pyup-scheduled-update-2024-10-07

1 year, 3 months ago

bfb9eb8b

Update tqdm from 4.37.0 to 4.66.5

wheel 0.33.6 and Sphinx 2.2.1 have known security vulnerabilities.

Package	Installed	Affected	Info
wheel	0.33.6	<0.46.2	show Affected versions of the wheel package are vulnerable to Path Traversal due to applying extracted file permissions using an unsanitized archive pathname. The vulnerable logic is in wheel.cli.unpack.unpack (and setuptools._vendor.wheel.cli.unpack.unpack), where the code calls wf.extract(zinfo, destination) but then performs destination.joinpath(zinfo.filename).chmod(permissions) using zinfo.filename directly, allowing dot-dot-slash sequences to escape the intended directory.
wheel	0.33.6	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
Sphinx	2.2.1	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.
Sphinx	2.2.1	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.
Sphinx	2.2.1	<3.3.0	show Sphinx 3.3.0 includes a fix for a ReDoS vulnerability in inventory. https://github.com/sphinx-doc/sphinx/issues/8175 https://github.com/sphinx-doc/sphinx/commit/f7b872e673f9b359a61fd287a7338a28077840d2
Sphinx	2.2.1	<3.3.0	show Sphinx 3.3.0 includes a fix for a ReDoS vulnerability in docstring. https://github.com/sphinx-doc/sphinx/issues/8172 https://github.com/sphinx-doc/sphinx/commit/f00e75278c5999f40b214d8934357fbf0e705417