Safety CI > dssg/triage

pyup-scheduled-update-2023-10-01

1 year, 10 months ago

Update pyyaml from 6.0 to 6.0.1

scipy 1.8.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-scheduled-update-2023-10-01

1 year, 10 months ago

94d9f79f

Update wheel from 0.38.2 to 0.41.2

scipy 1.8.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-scheduled-update-2023-10-01

1 year, 10 months ago

ef076bf9

Update black from 22.3.0 to 23.9.1

scipy 1.8.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-scheduled-update-2023-10-01

1 year, 10 months ago

f602bc76

Update mkdocstrings from 0.18.1 to 0.23.0

scipy 1.8.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-scheduled-update-2023-10-01

1 year, 10 months ago

7125a935

Update mkdocs from 1.3.0 to 1.5.3

scipy 1.8.0 and mkdocs-material 8.2.12 have known security vulnerabilities.

Package	Installed	Affected	Info
mkdocs-material	8.2.12	<9.5.5	show Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477. https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b
mkdocs-material	8.2.12	<9.1.13	show Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts. https://github.com/squidfunk/mkdocs-material/issues/5515 https://github.com/squidfunk/mkdocs-material/issues/5521
mkdocs-material	8.2.12	<9.5.32	show MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

Package

Installed

Affected

Info

mkdocs-material

8.2.12

<9.5.5

show

Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477.
https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b

mkdocs-material

8.2.12

<9.1.13

show

Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts.
https://github.com/squidfunk/mkdocs-material/issues/5515
https://github.com/squidfunk/mkdocs-material/issues/5521

mkdocs-material

8.2.12

<9.5.32

show

MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

pyup-scheduled-update-2023-10-01

1 year, 10 months ago

3cbbf09d

Update pymdown-extensions from 10.0.1 to 10.3

scipy 1.8.0 and mkdocs-material 8.2.12 have known security vulnerabilities.

Package	Installed	Affected	Info
mkdocs-material	8.2.12	<9.5.5	show Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477. https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b
mkdocs-material	8.2.12	<9.1.13	show Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts. https://github.com/squidfunk/mkdocs-material/issues/5515 https://github.com/squidfunk/mkdocs-material/issues/5521
mkdocs-material	8.2.12	<9.5.32	show MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

Package

Installed

Affected

Info

mkdocs-material

8.2.12

<9.5.5

show

Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477.
https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b

mkdocs-material

8.2.12

<9.1.13

show

Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts.
https://github.com/squidfunk/mkdocs-material/issues/5515
https://github.com/squidfunk/mkdocs-material/issues/5521

mkdocs-material

8.2.12

<9.5.32

show

MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

pyup-scheduled-update-2023-10-01

1 year, 10 months ago

7cb22938

Update mkdocs-material from 8.2.12 to 9.4.2

scipy 1.8.0 has known security vulnerabilities.

Package	Installed	Affected	Info

csvmatrix-memory-issue

1 year, 11 months ago

15dabefa

removing files

scipy 1.8.0 and mkdocs-material 8.2.12 have known security vulnerabilities.

Package	Installed	Affected	Info
mkdocs-material	8.2.12	<9.5.5	show Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477. https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b
mkdocs-material	8.2.12	<9.1.13	show Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts. https://github.com/squidfunk/mkdocs-material/issues/5515 https://github.com/squidfunk/mkdocs-material/issues/5521
mkdocs-material	8.2.12	<9.5.32	show MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

Package

Installed

Affected

Info

mkdocs-material

8.2.12

<9.5.5

show

Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477.
https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b

mkdocs-material

8.2.12

<9.1.13

show

Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts.
https://github.com/squidfunk/mkdocs-material/issues/5515
https://github.com/squidfunk/mkdocs-material/issues/5521

mkdocs-material

8.2.12

<9.5.32

show

MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

csvmatrix-memory-issue

1 year, 11 months ago

87356510

check entity id and knowledge date code

scipy 1.8.0 and mkdocs-material 8.2.12 have known security vulnerabilities.

Package	Installed	Affected	Info
mkdocs-material	8.2.12	<9.5.5	show Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477. https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b
mkdocs-material	8.2.12	<9.1.13	show Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts. https://github.com/squidfunk/mkdocs-material/issues/5515 https://github.com/squidfunk/mkdocs-material/issues/5521
mkdocs-material	8.2.12	<9.5.32	show MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

Package

Installed

Affected

Info

mkdocs-material

8.2.12

<9.5.5

show

Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477.
https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b

mkdocs-material

8.2.12

<9.1.13

show

Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts.
https://github.com/squidfunk/mkdocs-material/issues/5515
https://github.com/squidfunk/mkdocs-material/issues/5521

mkdocs-material

8.2.12

<9.5.32

show

MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

csvmatrix-memory-issue

1 year, 11 months ago

5577b8ad

name of files for sorted entities

scipy 1.8.0 and mkdocs-material 8.2.12 have known security vulnerabilities.

Package	Installed	Affected	Info
mkdocs-material	8.2.12	<9.5.5	show Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477. https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b
mkdocs-material	8.2.12	<9.1.13	show Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts. https://github.com/squidfunk/mkdocs-material/issues/5515 https://github.com/squidfunk/mkdocs-material/issues/5521
mkdocs-material	8.2.12	<9.5.32	show MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

Package

Installed

Affected

Info

mkdocs-material

8.2.12

<9.5.5

show

Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477.
https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b

mkdocs-material

8.2.12

<9.1.13

show

Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts.
https://github.com/squidfunk/mkdocs-material/issues/5515
https://github.com/squidfunk/mkdocs-material/issues/5521

mkdocs-material

8.2.12

<9.5.32

show

MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

csvmatrix-memory-issue

1 year, 11 months ago

e7ce3f14

filenames

scipy 1.8.0 and mkdocs-material 8.2.12 have known security vulnerabilities.

Package	Installed	Affected	Info
mkdocs-material	8.2.12	<9.5.5	show Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477. https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b
mkdocs-material	8.2.12	<9.1.13	show Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts. https://github.com/squidfunk/mkdocs-material/issues/5515 https://github.com/squidfunk/mkdocs-material/issues/5521
mkdocs-material	8.2.12	<9.5.32	show MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

Package

Installed

Affected

Info

mkdocs-material

8.2.12

<9.5.5

show

Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477.
https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b

mkdocs-material

8.2.12

<9.1.13

show

Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts.
https://github.com/squidfunk/mkdocs-material/issues/5515
https://github.com/squidfunk/mkdocs-material/issues/5521

mkdocs-material

8.2.12

<9.5.32

show

MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

csvmatrix-memory-issue

1 year, 11 months ago

f52e9590

check rows on csv files

scipy 1.8.0 and mkdocs-material 8.2.12 have known security vulnerabilities.

Package	Installed	Affected	Info
mkdocs-material	8.2.12	<9.5.5	show Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477. https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b
mkdocs-material	8.2.12	<9.1.13	show Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts. https://github.com/squidfunk/mkdocs-material/issues/5515 https://github.com/squidfunk/mkdocs-material/issues/5521
mkdocs-material	8.2.12	<9.5.32	show MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

Package

Installed

Affected

Info

mkdocs-material

8.2.12

<9.5.5

show

Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477.
https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b

mkdocs-material

8.2.12

<9.1.13

show

Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts.
https://github.com/squidfunk/mkdocs-material/issues/5515
https://github.com/squidfunk/mkdocs-material/issues/5521

mkdocs-material

8.2.12

<9.5.32

show

MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

master

1 year, 11 months ago

f4cdb677

Bump version: 5.2.2 -> 5.2.3

scipy 1.8.0 and mkdocs-material 8.2.12 have known security vulnerabilities.

Package	Installed	Affected	Info
mkdocs-material	8.2.12	<9.5.5	show Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477. https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b
mkdocs-material	8.2.12	<9.1.13	show Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts. https://github.com/squidfunk/mkdocs-material/issues/5515 https://github.com/squidfunk/mkdocs-material/issues/5521
mkdocs-material	8.2.12	<9.5.32	show MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

Package

Installed

Affected

Info

mkdocs-material

8.2.12

<9.5.5

show

Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477.
https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b

mkdocs-material

8.2.12

<9.1.13

show

Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts.
https://github.com/squidfunk/mkdocs-material/issues/5515
https://github.com/squidfunk/mkdocs-material/issues/5521

mkdocs-material

8.2.12

<9.5.32

show

MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

master

1 year, 11 months ago

9d9d2537

dist

scipy 1.8.0 and mkdocs-material 8.2.12 have known security vulnerabilities.

Package	Installed	Affected	Info
mkdocs-material	8.2.12	<9.5.5	show Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477. https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b
mkdocs-material	8.2.12	<9.1.13	show Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts. https://github.com/squidfunk/mkdocs-material/issues/5515 https://github.com/squidfunk/mkdocs-material/issues/5521
mkdocs-material	8.2.12	<9.5.32	show MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

Package

Installed

Affected

Info

mkdocs-material

8.2.12

<9.5.5

show

Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477.
https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b

mkdocs-material

8.2.12

<9.1.13

show

Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts.
https://github.com/squidfunk/mkdocs-material/issues/5515
https://github.com/squidfunk/mkdocs-material/issues/5521

mkdocs-material

8.2.12

<9.5.32

show

MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

master

1 year, 11 months ago

711f7ae9

delete id-token

scipy 1.8.0 and mkdocs-material 8.2.12 have known security vulnerabilities.

Package	Installed	Affected	Info
mkdocs-material	8.2.12	<9.5.5	show Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477. https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b
mkdocs-material	8.2.12	<9.1.13	show Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts. https://github.com/squidfunk/mkdocs-material/issues/5515 https://github.com/squidfunk/mkdocs-material/issues/5521
mkdocs-material	8.2.12	<9.5.32	show MKDocs Material addresses an RXSS vulnerability found in deep links within search results.

Package

Installed

Affected

Info

mkdocs-material

8.2.12

<9.5.5

show

Mkdocs-material 9.5.5 includes a change in its dependency on Pillow. Previously set to approximately version 9.4, it has now been updated to version 10.22. This change was made in response to the security vulnerability identified as CVE-2023-504477.
https://github.com/squidfunk/mkdocs-material/commit/fe11bc0cabd692d37bc4cc4e8034dbe6783ef36b

mkdocs-material

8.2.12

<9.1.13

show

Mkdocs-material 9.1.13 includes a fix for a Race Condition Vulnerability. Social plugin triggers the race condition vulnerability when downloading fonts.
https://github.com/squidfunk/mkdocs-material/issues/5515
https://github.com/squidfunk/mkdocs-material/issues/5521

mkdocs-material

8.2.12

<9.5.32

show

MKDocs Material addresses an RXSS vulnerability found in deep links within search results.