Safety CI > cookiecutter/cookiecutter-django

master

5 years, 7 months ago

1339dcb7

Merge pull request #2862 from pydanny/pyup-update-djangorestframework-3.11.1-to-3.12.1 Update djang

No dependencies with known security vulnerabilities.

master

5 years, 7 months ago

9c426725

Merge pull request #2859 from pydanny/pyup-update-pytest-6.0.2-to-6.1.0

djangorestframework 3.11.1 has known security vulnerabilities.

Package	Installed	Affected	Info
djangorestframework	3.11.1	<3.11.2	show A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.
djangorestframework	3.11.1	<3.15.2	show Affected versions of the package djangorestframework are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

Package

Installed

Affected

Info

djangorestframework

3.11.1

<3.11.2

show

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.

djangorestframework

3.11.1

<3.15.2

show

Affected versions of the package djangorestframework are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

pyup-update-ipdb-0.13.3-to-0.13.4

5 years, 7 months ago

58c06e55

Update ipdb from 0.13.3 to 0.13.4

djangorestframework 3.11.1 has known security vulnerabilities.

Package	Installed	Affected	Info
djangorestframework	3.11.1	<3.11.2	show A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.
djangorestframework	3.11.1	<3.15.2	show Affected versions of the package djangorestframework are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

Package

Installed

Affected

Info

djangorestframework

3.11.1

<3.11.2

show

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.

djangorestframework

3.11.1

<3.15.2

show

Affected versions of the package djangorestframework are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

master

5 years, 7 months ago

50d65df9

Merge pull request #2855 from pydanny/pyup-update-django-debug-toolbar-3.1-to-3.1.1 Update django-d

djangorestframework 3.11.1 has known security vulnerabilities.

Package	Installed	Affected	Info
djangorestframework	3.11.1	<3.11.2	show A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.
djangorestframework	3.11.1	<3.15.2	show Affected versions of the package djangorestframework are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

Package

Installed

Affected

Info

djangorestframework

3.11.1

<3.11.2

show

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.

djangorestframework

3.11.1

<3.15.2

show

Affected versions of the package djangorestframework are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

pyup-update-django-stubs-1.5.0-to-1.6.0

5 years, 7 months ago

9421c7de

Update django-stubs from 1.5.0 to 1.6.0

No dependencies with known security vulnerabilities.

dependabot/github_actions/actions/setup-python-v2.1.3

5 years, 7 months ago

f98211ae

Bump actions/setup-python from v2.1.2 to v2.1.3 Bumps [actions/setup-python](https://github.com/act

No dependencies with known security vulnerabilities.

master

5 years, 7 months ago

1a701ed7

Update README.rst

No dependencies with known security vulnerabilities.

master

5 years, 7 months ago

da850d22

Update README.rst

No dependencies with known security vulnerabilities.

update/pre-commit-autoupdate

5 years, 7 months ago

aa6fd538

Auto-update pre-commit hooks

No dependencies with known security vulnerabilities.

pyup-update-uvicorn-0.11.8-to-0.12.1

5 years, 7 months ago

604325a1

Update uvicorn from 0.11.8 to 0.12.1

No dependencies with known security vulnerabilities.

pyup-update-isort-5.5.3-to-5.5.4

5 years, 7 months ago

cf26e2d7

Update isort from 5.5.3 to 5.5.4

No dependencies with known security vulnerabilities.

pyup-update-sentry-sdk-0.17.7-to-0.18.0

5 years, 7 months ago

ae346d4a

Update sentry-sdk from 0.17.7 to 0.18.0

No dependencies with known security vulnerabilities.

pyup-update-djangorestframework-3.11.1-to-3.12.1

5 years, 7 months ago

6fb51ed4

Update djangorestframework from 3.11.1 to 3.12.1

No dependencies with known security vulnerabilities.

pyup-update-djangorestframework-3.11.1-to-3.12.0

5 years, 7 months ago

7a0ea6b5

Update djangorestframework from 3.11.1 to 3.12.0

No dependencies with known security vulnerabilities.

pyup-update-uvicorn-0.11.8-to-0.12.0

5 years, 7 months ago

d6e43d70

Update uvicorn from 0.11.8 to 0.12.0

No dependencies with known security vulnerabilities.