Safety CI > cookiecutter/cookiecutter-django

pyup-update-mypy-1.2.0-to-1.3.0

2 years, 11 months ago

003e7d45

Update mypy from 1.2.0 to 1.3.0

No dependencies with known security vulnerabilities.

pyup-update-sphinx-rtd-theme-1.2.0-to-1.2.1

2 years, 11 months ago

c1b0b9c5

Update sphinx-rtd-theme from 1.2.0 to 1.2.1

No dependencies with known security vulnerabilities.

pyup-update-sentry-sdk-1.23.1-to-1.24.0

2 years, 11 months ago

3a67ccce

Update sentry-sdk from 1.23.1 to 1.24.0

No dependencies with known security vulnerabilities.

master

2 years, 11 months ago

65abf616

Fix compatibility webpack-bundle-tracker>=2.0.0 js library (#4350) required after upgrade django-we

No dependencies with known security vulnerabilities.

master

2 years, 11 months ago

60a3ee78

Bump webpack-bundle-tracker in /{{cookiecutter.project_slug}} (#4347) Bumps [webpack-bundle-tracker

No dependencies with known security vulnerabilities.

master

2 years, 11 months ago

2dab4630

Update django-webpack-loader from 1.8.1 to 2.0.0 (#4345)

No dependencies with known security vulnerabilities.

master

2 years, 11 months ago

52c2b057

Update pytest-xdist from 3.3.0 to 3.3.1 (#4344)

No dependencies with known security vulnerabilities.

master

2 years, 11 months ago

b0d8916e

Update requests from 2.30.0 to 2.31.0 (#4346)

No dependencies with known security vulnerabilities.

pyup-update-sentry-sdk-1.23.1-to-1.24.0

2 years, 11 months ago

a3d8db10

Update sentry-sdk from 1.23.1 to 1.24.0

requests 2.30.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.30.0	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.30.0	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.
requests	2.30.0	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.
requests	2.30.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

pyup-update-sphinx-rtd-theme-1.2.0-to-1.2.1

2 years, 11 months ago

89b38a03

Update sphinx-rtd-theme from 1.2.0 to 1.2.1

requests 2.30.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.30.0	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.30.0	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.
requests	2.30.0	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.
requests	2.30.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

dependabot/npm_and_yarn/{{cookiecutter.project_slug}}/webpack-bundle-tracker-2.0.0

2 years, 11 months ago

daaa6b9b

Bump webpack-bundle-tracker in /{{cookiecutter.project_slug}} Bumps [webpack-bundle-tracker](https:

requests 2.30.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.30.0	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.30.0	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.
requests	2.30.0	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.
requests	2.30.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

pyup-update-requests-2.30.0-to-2.31.0

2 years, 11 months ago

bf5a69a4

Update requests from 2.30.0 to 2.31.0

No dependencies with known security vulnerabilities.

pyup-update-django-webpack-loader-1.8.1-to-2.0.0

2 years, 11 months ago

ce56aab1

Update django-webpack-loader from 1.8.1 to 2.0.0

No dependencies with known security vulnerabilities.

pyup-update-pytest-xdist-3.3.0-to-3.3.1

2 years, 11 months ago

d8872dd5

Update pytest-xdist from 3.3.0 to 3.3.1

No dependencies with known security vulnerabilities.

master

2 years, 11 months ago

7a35191a

Release 2023.05.18

No dependencies with known security vulnerabilities.