Safety CI > fesanmar/Stilpy

pyup-update-sphinx-3.3.1-to-7.4.4

1 year, 10 months ago

a94328bb

Update sphinx from 3.3.1 to 7.4.4

No dependencies with known security vulnerabilities.

pyup-update-sphinx-3.3.1-to-7.4.3

1 year, 10 months ago

b045af23

Update sphinx from 3.3.1 to 7.4.3

No dependencies with known security vulnerabilities.

pyup-update-sphinx-3.3.1-to-7.4.0

1 year, 10 months ago

085ad5ad

Update sphinx from 3.3.1 to 7.4.0

No dependencies with known security vulnerabilities.

pyup-update-coverage-5.3-to-7.6.0

1 year, 10 months ago

c957852f

Update coverage from 5.3 to 7.6.0

No dependencies with known security vulnerabilities.

pyup-update-pip-23.3-to-24.1.2

1 year, 11 months ago

dba3e6ce

Update pip from 23.3 to 24.1.2

No dependencies with known security vulnerabilities.

pyup-update-tox-3.20.1-to-4.16.0

1 year, 11 months ago

23f052f0

Update tox from 3.20.1 to 4.16.0

No dependencies with known security vulnerabilities.

pyup-update-pip-23.3-to-24.1.1

1 year, 11 months ago

3810bb86

Update pip from 23.3 to 24.1.1

No dependencies with known security vulnerabilities.

pyup-update-twine-3.2.0-to-5.1.1

1 year, 11 months ago

f7cdcb34

Update twine from 3.2.0 to 5.1.1

No dependencies with known security vulnerabilities.

pyup-update-coverage-5.3-to-7.5.4

1 year, 11 months ago

4925a58c

Update coverage from 5.3 to 7.5.4

No dependencies with known security vulnerabilities.

pyup-update-pip-23.3-to-24.1

1 year, 11 months ago

f932d116

Update pip from 23.3 to 24.1

No dependencies with known security vulnerabilities.

pyup-update-flake8-3.8.4-to-7.1.0

1 year, 11 months ago

85bdf982

Update flake8 from 3.8.4 to 7.1.0

No dependencies with known security vulnerabilities.

pyup-update-tox-3.20.1-to-4.15.1

1 year, 12 months ago

7ba6d328

Update tox from 3.20.1 to 4.15.1

No dependencies with known security vulnerabilities.

pyup-update-coverage-5.3-to-7.5.3

2 years ago

7a479d87

Update coverage from 5.3 to 7.5.3

pip 23.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	23.3	<26.0	show Affected versions of the pip package are vulnerable to Path Traversal due to an incorrect directory containment check when extracting wheel archives. In src/pip/_internal/utils/unpacking.py, the is_within_directory() helper used os.path.commonprefix() (character-by-character) to compare directory and target paths, allowing crafted paths like a parent-directory substring match to be treated as safely inside the installation directory.
pip	23.3	<25.2	show Affected versions of the pip package are vulnerable to Arbitrary File Overwrite due to improper validation of symbolic link targets in the fallback tar extraction code. In src/pip/_internal/utils/unpacking.py, the _untar_without_filter routine used when the Python tarfile module lacks PEP 706 (no tarfile.data_filter) extracted symlink members with tar._extract_member without verifying that link destinations resolve under the extraction root, a check later added via the is_symlink_target_in_tar helper.
pip	23.3	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

23.3

<26.0

show

Affected versions of the pip package are vulnerable to Path Traversal due to an incorrect directory containment check when extracting wheel archives. In src/pip/_internal/utils/unpacking.py, the is_within_directory() helper used os.path.commonprefix() (character-by-character) to compare directory and target paths, allowing crafted paths like a parent-directory substring match to be treated as safely inside the installation directory.

pip

23.3

<25.2

show

Affected versions of the pip package are vulnerable to Arbitrary File Overwrite due to improper validation of symbolic link targets in the fallback tar extraction code. In src/pip/_internal/utils/unpacking.py, the _untar_without_filter routine used when the Python tarfile module lacks PEP 706 (no tarfile.data_filter) extracted symlink members with tar._extract_member without verifying that link destinations resolve under the extraction root, a check later added via the is_symlink_target_in_tar helper.

pip

23.3

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

pyup-update-coverage-5.3-to-7.5.2

2 years ago

529fe52c

Update coverage from 5.3 to 7.5.2

pip 23.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	23.3	<26.0	show Affected versions of the pip package are vulnerable to Path Traversal due to an incorrect directory containment check when extracting wheel archives. In src/pip/_internal/utils/unpacking.py, the is_within_directory() helper used os.path.commonprefix() (character-by-character) to compare directory and target paths, allowing crafted paths like a parent-directory substring match to be treated as safely inside the installation directory.
pip	23.3	<25.2	show Affected versions of the pip package are vulnerable to Arbitrary File Overwrite due to improper validation of symbolic link targets in the fallback tar extraction code. In src/pip/_internal/utils/unpacking.py, the _untar_without_filter routine used when the Python tarfile module lacks PEP 706 (no tarfile.data_filter) extracted symlink members with tar._extract_member without verifying that link destinations resolve under the extraction root, a check later added via the is_symlink_target_in_tar helper.
pip	23.3	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

23.3

<26.0

show

Affected versions of the pip package are vulnerable to Path Traversal due to an incorrect directory containment check when extracting wheel archives. In src/pip/_internal/utils/unpacking.py, the is_within_directory() helper used os.path.commonprefix() (character-by-character) to compare directory and target paths, allowing crafted paths like a parent-directory substring match to be treated as safely inside the installation directory.

pip

23.3

<25.2

show

Affected versions of the pip package are vulnerable to Arbitrary File Overwrite due to improper validation of symbolic link targets in the fallback tar extraction code. In src/pip/_internal/utils/unpacking.py, the _untar_without_filter routine used when the Python tarfile module lacks PEP 706 (no tarfile.data_filter) extracted symlink members with tar._extract_member without verifying that link destinations resolve under the extraction root, a check later added via the is_symlink_target_in_tar helper.

pip

23.3

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

pyup-update-watchdog-0.10.4-to-4.0.1

2 years ago

c41504b7

Update watchdog from 0.10.4 to 4.0.1

pip 23.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	23.3	<26.0	show Affected versions of the pip package are vulnerable to Path Traversal due to an incorrect directory containment check when extracting wheel archives. In src/pip/_internal/utils/unpacking.py, the is_within_directory() helper used os.path.commonprefix() (character-by-character) to compare directory and target paths, allowing crafted paths like a parent-directory substring match to be treated as safely inside the installation directory.
pip	23.3	<25.2	show Affected versions of the pip package are vulnerable to Arbitrary File Overwrite due to improper validation of symbolic link targets in the fallback tar extraction code. In src/pip/_internal/utils/unpacking.py, the _untar_without_filter routine used when the Python tarfile module lacks PEP 706 (no tarfile.data_filter) extracted symlink members with tar._extract_member without verifying that link destinations resolve under the extraction root, a check later added via the is_symlink_target_in_tar helper.
pip	23.3	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

23.3

<26.0

show

Affected versions of the pip package are vulnerable to Path Traversal due to an incorrect directory containment check when extracting wheel archives. In src/pip/_internal/utils/unpacking.py, the is_within_directory() helper used os.path.commonprefix() (character-by-character) to compare directory and target paths, allowing crafted paths like a parent-directory substring match to be treated as safely inside the installation directory.

pip

23.3

<25.2

show

Affected versions of the pip package are vulnerable to Arbitrary File Overwrite due to improper validation of symbolic link targets in the fallback tar extraction code. In src/pip/_internal/utils/unpacking.py, the _untar_without_filter routine used when the Python tarfile module lacks PEP 706 (no tarfile.data_filter) extracted symlink members with tar._extract_member without verifying that link destinations resolve under the extraction root, a check later added via the is_symlink_target_in_tar helper.

pip

23.3

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.