Safety CI > cookiecutter/cookiecutter-django

pyup-update-watchfiles-0.18.1-to-0.19.0

3 years, 7 months ago

b779686e

Update watchfiles from 0.18.1 to 0.19.0

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

master

3 years, 7 months ago

b1d06f32

Release 2023.03.26

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

master

3 years, 7 months ago

3ca2c87a

Update tox from 4.4.7 to 4.4.8 (#4231)

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

pyup-update-tox-4.4.7-to-4.4.8

3 years, 7 months ago

747a5868

Update tox from 4.4.7 to 4.4.8

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

master

3 years, 7 months ago

8156efd5

Update pre-commit to 3.2.1 (#4229) * Update pre-commit from 3.2.0 to 3.2.1 * Update pre-commit f

redis 4.5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
redis	4.5.3	>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4	show Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general. https://github.com/advisories/GHSA-8fww-64cx-x8p5

Package

Installed

Affected

Info

redis

4.5.3

>=4.5.0,<4.5.4 , >=4.2.0rc1,<4.4.4

show

Redis 4.4.4 and 4.5.4 include a fix for CVE-2023-28859: Redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.
https://github.com/advisories/GHSA-8fww-64cx-x8p5

master

3 years, 7 months ago

2517d037

Release 2023.03.25