Safety CI > cookiecutter/cookiecutter-django

pyup-update-sphinx-7.4.7-to-8.0.2

1 month, 2 weeks ago

025a116f

Update sphinx from 7.4.7 to 8.0.2

No dependencies with known security vulnerabilities.

dependabot/pip/docs/sphinx-8.0.2

1 month, 2 weeks ago

907bfa5f

Bump sphinx from 7.4.7 to 8.0.2 in /docs Bumps [sphinx](https://github.com/sphinx-doc/sphinx) from

No dependencies with known security vulnerabilities.

master

1 month, 2 weeks ago

877d81d6

Merge pull request #5437 from cookiecutter/pyup-update-sphinx-rtd-theme-2.0.0-to-3.0.0 Update sphin

No dependencies with known security vulnerabilities.

pyup-update-sphinx-rtd-theme-2.0.0-to-3.0.0

1 month, 2 weeks ago

1a893456

Update sphinx-rtd-theme from 2.0.0 to 3.0.0

No dependencies with known security vulnerabilities.

master

1 month, 2 weeks ago

7d9f58be

Merge pull request #5436 from cookiecutter/dependabot/docker/{{cookiecutter.project_slug}}/compose/p

No dependencies with known security vulnerabilities.

master

1 month, 2 weeks ago

d826d2e6

Merge pull request #5435 from cookiecutter/dependabot/github_actions/astral-sh/setup-uv-3 Bump astr

No dependencies with known security vulnerabilities.

dependabot/docker/{{cookiecutter.project_slug}}/compose/production/aws/amazon/aws-cli-2.18.0

1 month, 2 weeks ago

7114a1e1

Bump amazon/aws-cli Bumps amazon/aws-cli from 2.17.0 to 2.18.0. --- updated-dependencies: - depend

No dependencies with known security vulnerabilities.

dependabot/github_actions/astral-sh/setup-uv-3

1 month, 2 weeks ago

1bbd6d5f

Bump astral-sh/setup-uv from 2 to 3 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-u

No dependencies with known security vulnerabilities.

update/pre-commit-autoupdate

1 month, 2 weeks ago

29bd84b3

Auto-update pre-commit hooks

No dependencies with known security vulnerabilities.

master

1 month, 2 weeks ago

52ce09e6

Release 2024.10.05

No dependencies with known security vulnerabilities.

pyup-update-pre-commit-3.8.0-to-4.0.0

1 month, 2 weeks ago

ba3b48dc

Update pre-commit from 3.8.0 to 4.0.0

No dependencies with known security vulnerabilities.

master

1 month, 2 weeks ago

0cac725c

Merge pull request #5356 from foarsitter/uv Replace pip with uv for the project files

No dependencies with known security vulnerabilities.

master

1 month, 2 weeks ago

a0af4617

Update crispy-bootstrap5 from 2024.2 to 2024.10 (#5430)

jinja2 3.1.4 has known security vulnerabilities.

Package	Installed	Affected	Info
jinja2	3.1.4	>=0	show In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

Package

Installed

Affected

Info

jinja2

3.1.4

>=0

show

In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. 
NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

master

1 month, 2 weeks ago

b0c45224

Group docs into sections (#5426)

jinja2 3.1.4 has known security vulnerabilities.

Package	Installed	Affected	Info
jinja2	3.1.4	>=0	show In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

Package

Installed

Affected

Info

jinja2

3.1.4

>=0

show

In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. 
NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

pyup-update-crispy-bootstrap5-2024.2-to-2024.10

1 month, 2 weeks ago

f1174e53

Update crispy-bootstrap5 from 2024.2 to 2024.10

jinja2 3.1.4 has known security vulnerabilities.

Package	Installed	Affected	Info
jinja2	3.1.4	>=0	show In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

Package

Installed

Affected

Info

jinja2

3.1.4

>=0

show

In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. 
NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.