Safety CI > cookiecutter/cookiecutter-django

dependabot/docker/{{cookiecutter.project_slug}}/compose/production/traefik/traefik-3.1.5

1 month, 3 weeks ago

f6650aab

Bump traefik Bumps traefik from 3.1.4 to 3.1.5. --- updated-dependencies: - dependency-name: traef

jinja2 3.1.4 has known security vulnerabilities.

Package	Installed	Affected	Info
jinja2	3.1.4	>=0	show In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

Package

Installed

Affected

Info

jinja2

3.1.4

>=0

show

In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. 
NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

master

1 month, 3 weeks ago

9bbee5f8

Release 2024.10.02

jinja2 3.1.4 has known security vulnerabilities.

Package	Installed	Affected	Info
jinja2	3.1.4	>=0	show In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

Package

Installed

Affected

Info

jinja2

3.1.4

>=0

show

In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. 
NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

uv-lock-workflow

1 month, 3 weeks ago

c7671a68

Only run uv lock workflow when GH_PAT is set

No dependencies with known security vulnerabilities.

uv-lock-workflow

1 month, 3 weeks ago

7aa9d065

Regenerate uv.lock

No dependencies with known security vulnerabilities.

uv-lock-workflow

1 month, 3 weeks ago

2a485a8f

Update pyproject.toml

No dependencies with known security vulnerabilities.

uv

1 month, 3 weeks ago

f462a3fc

Regenerate uv.lock

No dependencies with known security vulnerabilities.

uv

1 month, 3 weeks ago

e5744d8b

Update .github/workflows/dependabot-uv-lock.yml

No dependencies with known security vulnerabilities.

uv

1 month, 3 weeks ago

21df0dd7

Update pyproject.toml

No dependencies with known security vulnerabilities.

pyup-update-sphinx-autobuild-2024.9.19-to-2024.10.3

1 month, 3 weeks ago

35458e3c

Update sphinx-autobuild from 2024.9.19 to 2024.10.3

jinja2 3.1.4 has known security vulnerabilities.

Package	Installed	Affected	Info
jinja2	3.1.4	>=0	show In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

Package

Installed

Affected

Info

jinja2

3.1.4

>=0

show

In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. 
NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

uv

1 month, 3 weeks ago

de191320

Merge remote-tracking branch 'foarsitter/uv' into uv

No dependencies with known security vulnerabilities.

uv

1 month, 3 weeks ago

9526003d

[pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.c

No dependencies with known security vulnerabilities.

pyup-update-tox-4.20.0-to-4.21.1

1 month, 3 weeks ago

8382f4fa

Update tox from 4.20.0 to 4.21.1

jinja2 3.1.4 has known security vulnerabilities.

Package	Installed	Affected	Info
jinja2	3.1.4	>=0	show In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

Package

Installed

Affected

Info

jinja2

3.1.4

>=0

show

In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. 
NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

uv

1 month, 3 weeks ago

afdcf8da

Update packages

No dependencies with known security vulnerabilities.

pyup-update-sphinx-autobuild-2024.9.19-to-2024.10.2

1 month, 3 weeks ago

0c25dad7

Update sphinx-autobuild from 2024.9.19 to 2024.10.2

jinja2 3.1.4 has known security vulnerabilities.

Package	Installed	Affected	Info
jinja2	3.1.4	>=0	show In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

Package

Installed

Affected

Info

jinja2

3.1.4

>=0

show

In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. 
NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

master

1 month, 3 weeks ago

12380e1e

Update Heroku runtime version to 3.12.7

jinja2 3.1.4 has known security vulnerabilities.

Package	Installed	Affected	Info
jinja2	3.1.4	>=0	show In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.

Package

Installed

Affected

Info

jinja2

3.1.4

>=0

show

In Jinja2, the from_string function is prone to Server Side Template Injection (SSTI) where it takes the source parameter as a template object, renders it, and then returns it. The attacker can exploit it with INJECTION COMMANDS in a URI. 
NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.