Safety CI > feihoo87/QuLab

pyup-scheduled-update-2020-03-30

6 years ago

0b8f6196

Update pyyaml from 5.3 to 5.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-03-30

6 years ago

42caa098

Update portalocker from 1.5.1 to 1.6.0

PyYAML 5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

5.3

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-scheduled-update-2020-03-30

6 years ago

c08b6606

Update numpy from 1.18.1 to 1.18.2

PyYAML 5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

5.3

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-scheduled-update-2020-03-30

6 years ago

34f350ac

Update nest-asyncio from 1.2.0 to 1.3.2

PyYAML 5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

5.3

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-scheduled-update-2020-03-30

6 years ago

6e513ce1

Update ipython from 7.12.0 to 7.13.0

PyYAML 5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

5.3

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-scheduled-update-2020-03-23

6 years ago

dbece8c3

Update pyzmq from 18.1.1 to 19.0.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-03-23

6 years ago

e0384131

Update pyyaml from 5.3 to 5.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-03-23

6 years ago

bdddd6e4

Update numpy from 1.18.1 to 1.18.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-03-23

6 years ago

c25827a5

Update nest-asyncio from 1.2.0 to 1.3.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-03-23

6 years ago

c2de1800

Update ipython from 7.12.0 to 7.13.0

No dependencies with known security vulnerabilities.

master

6 years, 1 month ago

e365df80

add `registerBaseFunc` and `registerDerivative`

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-03-16

6 years, 1 month ago

23e1bd46

Update pyzmq from 18.1.1 to 19.0.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-03-16

6 years, 1 month ago

a2a891e7

Update nest-asyncio from 1.2.0 to 1.3.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-03-16

6 years, 1 month ago

f3b73d6d

Update ipython from 7.12.0 to 7.13.0

No dependencies with known security vulnerabilities.

master

6 years, 1 month ago

c602ebe3

fix `D`, improve performence

No dependencies with known security vulnerabilities.