Safety CI > dssg/triage

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

24f03f26

Update flake8 from 4.0.1 to 6.0.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

aa4226d0

Update hypothesis from 6.46.1 to 6.75.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

046504ff

Update fakeredis from 1.7.1 to 2.11.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

064b1c59

Update moto from 3.1.7 to 4.1.8

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

2a0dba03

Update pytest-cov from 3.0.0 to 4.0.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

5bedd783

Update csvkit from 1.0.7 to 1.1.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

1e9efa6d

Update seaborn from 0.11.2 to 0.12.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

880a6a45

Update psycopg2-binary from 2.9.3 to 2.9.6

sqlparse 0.4.2 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.4.2	>=0.1.15,<0.4.4	show Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service). https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2
sqlparse	0.4.2	<0.5.0	show Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.

Package

Installed

Affected

Info

sqlparse

0.4.2

>=0.1.15,<0.4.4

show

Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service).
https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2

sqlparse

0.4.2

<0.5.0

show

Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

daf6546d

Update matplotlib from 3.5.1 to 3.7.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

5b9ee979

Update scikit-learn from 1.0.2 to 1.2.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

11b5c5df

Update scipy from 1.8.0 to 1.10.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

de351d99

Update requests from 2.27.1 to 2.29.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

83bc242c

Update graphviz from 0.20 to 0.20.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

bae69fe1

Update adjusttext from 0.7.3 to 0.8

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-05-01

2 years, 3 months ago

9e8fd641

Update pebble from 4.6.3 to 5.0.3

No dependencies with known security vulnerabilities.