Safety CI > dssg/triage

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

395db573

Update graphviz from 0.20 to 0.20.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

8964328f

Update pebble from 4.6.3 to 5.0.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

c304891e

Update argcmdr from 0.7.0 to 0.13.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

4c6d3b08

Update sqlparse from 0.4.2 to 0.4.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

df0cf254

Update wrapt from 1.14.0 to 1.14.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

8b7d0880

Update dickens from 1.0.1 to 2.0.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

35113520

Update retrying from 1.3.3 to 1.3.4

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

3545f60c

Update numpy from 1.22.3 to 1.24.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

91da7892

Update boto3 from 1.22.4 to 1.26.61

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

d60dbd00

Update psycopg2-binary from 2.9.3 to 2.9.5

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

da5f6a50

Update alembic from 1.7.7 to 1.9.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

41f427af

Update wheel from 0.37.1 to 0.38.4

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

9ddbdedf

Update black from 22.3.0 to 23.1.0

wheel 0.37.1 has known security vulnerabilities.

Package	Installed	Affected	Info
wheel	0.37.1	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

wheel

0.37.1

<0.38.1

show

Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

fec7d02c

Update mkdocstrings from 0.18.1 to 0.20.0

wheel 0.37.1 has known security vulnerabilities.

Package	Installed	Affected	Info
wheel	0.37.1	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

wheel

0.37.1

<0.38.1

show

Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup-scheduled-update-2023-02-01

2 years, 7 months ago

bcc00304

Update mkdocs-material from 8.2.12 to 9.0.9

wheel 0.37.1 has known security vulnerabilities.

Package	Installed	Affected	Info
wheel	0.37.1	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

wheel

0.37.1

<0.38.1

show

Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages