Safety CI > ericmjl/nxviz

pyup-scheduled-update-2020-05-11

4 years, 6 months ago

89e30d74

Update pytest from 5.4.1 to 5.4.2

No dependencies with known security vulnerabilities.

master

4 years, 6 months ago

3b38bb7b

Scheduled weekly dependency update for week 18 (#605) * Update hypothesis from 5.10.4 to 5.10.5

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-05-04

4 years, 6 months ago

f5c0729b

Update numpy from 1.18.3 to 1.18.4

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-05-04

4 years, 6 months ago

73c70104

Update hypothesis from 5.10.4 to 5.10.5

No dependencies with known security vulnerabilities.

master

4 years, 6 months ago

a0489d3c

Scheduled weekly dependency update for week 17 (#602) * Update hypothesis from 5.8.3 to 5.10.4 *

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-04-27

4 years, 6 months ago

3a2e280e

Update seaborn from 0.10.0 to 0.10.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-04-27

4 years, 6 months ago

33c33212

Update numpy from 1.18.2 to 1.18.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-04-27

4 years, 6 months ago

784af828

Update cryptography from 2.9 to 2.9.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-04-27

4 years, 6 months ago

3ab68602

Update hypothesis from 5.8.3 to 5.10.4

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-04-20

4 years, 7 months ago

69e51ba1

Update numpy from 1.18.2 to 1.18.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-04-20

4 years, 7 months ago

c610031f

Update hypothesis from 5.8.3 to 5.10.1

No dependencies with known security vulnerabilities.

master

4 years, 7 months ago

279b12cd

Scheduled weekly dependency update for week 15 (#600) * Update hypothesis from 5.6.0 to 5.8.3 *

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-04-13

4 years, 7 months ago

087b6aa6

Update pyyaml from 5.3 to 5.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-04-13

4 years, 7 months ago

aa5fdcd7

Update numpy from 1.18.1 to 1.18.2

PyYAML 5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466
PyYAML	5.3	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

5.3

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

PyYAML

5.3

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-scheduled-update-2020-04-13

4 years, 7 months ago

c57967f4

Update setuptools from 46.0.0 to 46.1.3

PyYAML 5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466
PyYAML	5.3	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

5.3

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

PyYAML

5.3

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.