Safety CI > engineervix/cookiecutter-wagtail-vix

renovate/ruff-0.x

2 years ago

582d8878

build(deps): update dependency ruff to ^0.5.0

black 24.1.1 has known security vulnerabilities.

Package	Installed	Affected	Info
black	24.1.1	<24.3.0	show Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.
black	24.1.1	<26.3.1	show Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

Package

Installed

Affected

Info

black

24.1.1

<24.3.0

show

Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.

black

24.1.1

<26.3.1

show

Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

renovate/boto3-1.x-lockfile

2 years ago

13983c50

build(deps): update dependency boto3 to v1.34.144

black 24.1.1 has known security vulnerabilities.

Package	Installed	Affected	Info
black	24.1.1	<24.3.0	show Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.
black	24.1.1	<26.3.1	show Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

Package

Installed

Affected

Info

black

24.1.1

<24.3.0

show

Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.

black

24.1.1

<26.3.1

show

Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

main

2 years ago

35ff3e28

build(deps): update dependency pytest-django to v4.8.0 (#502) Co-authored-by: renovate[bot] <291396

black 24.1.1 has known security vulnerabilities.

Package	Installed	Affected	Info
black	24.1.1	<24.3.0	show Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.
black	24.1.1	<26.3.1	show Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

Package

Installed

Affected

Info

black

24.1.1

<24.3.0

show

Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.

black

24.1.1

<26.3.1

show

Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

stack/wa60-dj50-py312-node20-deb12

2 years ago

094dd8f4

ci: switch cookicutter-wagtail-vix from coveralls.io to codecov.io

No dependencies with known security vulnerabilities.

stack/wa60-dj50-py312-node20-deb12

2 years ago

1eea6672

chore: fix {{cookiecutter.project_slug}}/.github/workflows/main.yml

No dependencies with known security vulnerabilities.

stack/wa60-dj50-py312-node20-deb12

2 years ago

803179b9

build: update dev dependencies for the cookiecutter-wagtail-vix project

No dependencies with known security vulnerabilities.

stack/wa60-dj50-py312-node20-deb12

2 years ago

9a30799e

fix: ensure djLint is happy with all templates

black 24.1.1 has known security vulnerabilities.

Package	Installed	Affected	Info
black	24.1.1	<24.3.0	show Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.
black	24.1.1	<26.3.1	show Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

Package

Installed

Affected

Info

black

24.1.1

<24.3.0

show

Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.

black

24.1.1

<26.3.1

show

Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

renovate/boto3-1.x-lockfile

2 years ago

7603eb6c

build(deps): update dependency boto3 to v1.34.144

black 24.1.1 has known security vulnerabilities.

Package	Installed	Affected	Info
black	24.1.1	<24.3.0	show Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.
black	24.1.1	<26.3.1	show Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

Package

Installed

Affected

Info

black

24.1.1

<24.3.0

show

Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.

black

24.1.1

<26.3.1

show

Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

renovate/boto3-1.x-lockfile

2 years ago

accaa3fa

build(deps): update dependency boto3 to v1.34.143

black 24.1.1 has known security vulnerabilities.

Package	Installed	Affected	Info
black	24.1.1	<24.3.0	show Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.
black	24.1.1	<26.3.1	show Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

Package

Installed

Affected

Info

black

24.1.1

<24.3.0

show

Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.

black

24.1.1

<26.3.1

show

Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

stack/wa60-dj50-py312-node20-deb12

2 years ago

01ba0a0c

fix: webpack dev server proxy config closes #512

black 24.1.1 has known security vulnerabilities.

Package	Installed	Affected	Info
black	24.1.1	<24.3.0	show Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.
black	24.1.1	<26.3.1	show Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

Package

Installed

Affected

Info

black

24.1.1

<24.3.0

show

Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.

black

24.1.1

<26.3.1

show

Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

renovate/boto3-1.x-lockfile

2 years ago

8ad5b7d0

build(deps): update dependency boto3 to v1.34.142

black 24.1.1 has known security vulnerabilities.

Package	Installed	Affected	Info
black	24.1.1	<24.3.0	show Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.
black	24.1.1	<26.3.1	show Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

Package

Installed

Affected

Info

black

24.1.1

<24.3.0

show

Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.

black

24.1.1

<26.3.1

show

Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

stack/wa60-dj50-py312-node20-deb12

2 years ago

67a17e3d

fix: ruff config closes #513

black 24.1.1 has known security vulnerabilities.

Package	Installed	Affected	Info
black	24.1.1	<24.3.0	show Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.
black	24.1.1	<26.3.1	show Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

Package

Installed

Affected

Info

black

24.1.1

<24.3.0

show

Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.

black

24.1.1

<26.3.1

show

Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

renovate/boto3-1.x-lockfile

2 years ago

cdafae6a

build(deps): update dependency boto3 to v1.34.141

black 24.1.1 has known security vulnerabilities.

Package	Installed	Affected	Info
black	24.1.1	<24.3.0	show Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.
black	24.1.1	<26.3.1	show Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

Package

Installed

Affected

Info

black

24.1.1

<24.3.0

show

Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.

black

24.1.1

<26.3.1

show

Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

renovate/boto3-1.x-lockfile

2 years ago

c67d86a0

build(deps): update dependency boto3 to v1.34.140

black 24.1.1 has known security vulnerabilities.

Package	Installed	Affected	Info
black	24.1.1	<24.3.0	show Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.
black	24.1.1	<26.3.1	show Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

Package

Installed

Affected

Info

black

24.1.1

<24.3.0

show

Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.

black

24.1.1

<26.3.1

show

Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

renovate/boto3-1.x-lockfile

2 years ago

73b6d097

build(deps): update dependency boto3 to v1.34.139

black 24.1.1 has known security vulnerabilities.

Package	Installed	Affected	Info
black	24.1.1	<24.3.0	show Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.
black	24.1.1	<26.3.1	show Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.

Package

Installed

Affected

Info

black

24.1.1

<24.3.0

show

Affected versions of Black are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.

black

24.1.1

<26.3.1

show

Affected versions of the black package are vulnerable to Path Traversal due to unsanitized user input in a cache file name. The vulnerability exists because Black incorporates the --python-cell-magics option value into the cache filename without sanitizing path elements, allowing the computed cache path to escape the intended cache directory.