Safety CI > cookiecutter/cookiecutter-django

master

3 years, 7 months ago

4ed32dde

Update pytz to 2023.3 (#4238)

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

master

3 years, 7 months ago

fffc2a2f

Auto-update pre-commit hooks (#4235) Co-authored-by: browniebroke <[email protected]

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

master

3 years, 7 months ago

43c32961

Update black to 23.3.0 (#4236) * Update black from 23.1.0 to 23.3.0 * Update black from 23.1.0 t

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

pyup-update-redis-4.5.3-to-4.5.4

3 years, 7 months ago

d583c97a

Update redis from 4.5.3 to 4.5.4

redis 4.5.4 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-pytz-2023.2-to-2023.3

3 years, 7 months ago

a9dfec41

Update pytz from 2023.2 to 2023.3

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

dependabot/npm_and_yarn/{{cookiecutter.project_slug}}/concurrently-8.0.1

3 years, 7 months ago

a6c37c6b

Bump concurrently from 7.6.0 to 8.0.1 in /{{cookiecutter.project_slug}} Bumps [concurrently](https:

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

pyup-update-black-23.1.0-to-23.3.0

3 years, 7 months ago

a1ca4f47

Update black from 23.1.0 to 23.3.0

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

pyup-update-black-23.1.0-to-23.3.0

3 years, 7 months ago

123b396d

Update black from 23.1.0 to 23.3.0

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

update/pre-commit-autoupdate

3 years, 7 months ago

f75dc174

Auto-update pre-commit hooks

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

master

3 years, 7 months ago

d77b33df

Update code of conduct link

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

pyup-update-sentry-sdk-1.17.0-to-1.18.0

3 years, 7 months ago

f116bd2a

Update sentry-sdk from 1.17.0 to 1.18.0

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

dependabot/npm_and_yarn/{{cookiecutter.project_slug}}/cssnano-6.0.0

3 years, 7 months ago

e96581e9

Bump cssnano from 5.1.15 to 6.0.0 in /{{cookiecutter.project_slug}} Bumps [cssnano](https://github.

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

master

3 years, 7 months ago

53029732

Release 2023.03.27

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

master

3 years, 7 months ago

6475dffb

Update watchfiles from 0.18.1 to 0.19.0 (#4232)

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

pyup-update-watchfiles-0.18.1-to-0.19.0

3 years, 7 months ago

b779686e

Update watchfiles from 0.18.1 to 0.19.0

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5