Safety CI > guykisel/inline-plz

pyup-scheduled-update-2024-05-01

3 days, 2 hours ago

ba44627b

Update pyopenssl from 20.0.1 to 24.1.0

py 1.11.0 and pyOpenSSL 24.1.0 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.11.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
pyOpenSSL	24.1.0	>=22.0.0	show CVE-2023-6129 affects PyOpenSSL versions starting from 22.0.0 due to a vulnerability in the POLY1305 MAC algorithm on PowerPC CPUs. This issue could lead to state corruption in applications, causing inaccurate outcomes or service disruptions. Attackers need specific conditions to exploit this flaw, including the ability to manipulate the algorithm's use and reliance on certain system registers by the application.

Package

Installed

Affected

Info

py

1.11.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyOpenSSL

24.1.0

>=22.0.0

show

CVE-2023-6129 affects PyOpenSSL versions starting from 22.0.0 due to a vulnerability in the POLY1305 MAC algorithm on PowerPC CPUs. This issue could lead to state corruption in applications, causing inaccurate outcomes or service disruptions. Attackers need specific conditions to exploit this flaw, including the ability to manipulate the algorithm's use and reliance on certain system registers by the application.

pyup-scheduled-update-2024-05-01

3 days, 2 hours ago

ee2565d5

Update pyyaml from 5.4.1 to 6.0.1

py 1.11.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.11.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287

Package

Installed

Affected

Info

py

1.11.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyup-scheduled-update-2024-05-01

3 days, 2 hours ago

188133d7

Update prospector from 1.7.7 to 1.10.3

py 1.11.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.11.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287

Package

Installed

Affected

Info

py

1.11.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyup-scheduled-update-2024-05-01

3 days, 2 hours ago

ae6ae1c0

Update pytest from 6.2.4 to 8.2.0

py 1.11.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.11.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287

Package

Installed

Affected

Info

py

1.11.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyup-scheduled-update-2024-05-01

3 days, 2 hours ago

0dfefd25

Update py from 1.10.0 to 1.11.0

py 1.11.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.11.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287

Package

Installed

Affected

Info

py

1.11.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyup-scheduled-update-2024-05-01

3 days, 2 hours ago

63d869fb

Update sphinx from 4.0.2 to 7.3.7

py 1.10.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287

Package

Installed

Affected

Info

py

1.10.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyup-scheduled-update-2024-05-01

3 days, 2 hours ago

1b1ba0d0

Update coverage from 5.5 to 7.5.0

py 1.10.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287

Package

Installed

Affected

Info

py

1.10.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyup-scheduled-update-2024-05-01

3 days, 2 hours ago

5fbaa639

Update tox from 3.23.1 to 4.15.0

py 1.10.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287

Package

Installed

Affected

Info

py

1.10.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyup-scheduled-update-2024-05-01

3 days, 2 hours ago

1752ce3b

Update flake8 from 3.9.2 to 7.0.0

py 1.10.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287

Package

Installed

Affected

Info

py

1.10.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyup-scheduled-update-2024-05-01

3 days, 2 hours ago

c7e8884a

Update watchdog from 2.1.2 to 4.0.0

py 1.10.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287

Package

Installed

Affected

Info

py

1.10.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyup-scheduled-update-2024-05-01

3 days, 2 hours ago

f28a52c1

Update wheel from 0.36.2 to 0.43.0

py 1.10.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.10.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287

Package

Installed

Affected

Info

py

1.10.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyup-scheduled-update-2024-04-01

1 month ago

260b60ba

Update pyopenssl from 20.0.1 to 24.1.0

py 1.11.0 and pyOpenSSL 24.1.0 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.11.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
pyOpenSSL	24.1.0	>=22.0.0	show CVE-2023-6129 affects PyOpenSSL versions starting from 22.0.0 due to a vulnerability in the POLY1305 MAC algorithm on PowerPC CPUs. This issue could lead to state corruption in applications, causing inaccurate outcomes or service disruptions. Attackers need specific conditions to exploit this flaw, including the ability to manipulate the algorithm's use and reliance on certain system registers by the application.

Package

Installed

Affected

Info

py

1.11.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyOpenSSL

24.1.0

>=22.0.0

show

CVE-2023-6129 affects PyOpenSSL versions starting from 22.0.0 due to a vulnerability in the POLY1305 MAC algorithm on PowerPC CPUs. This issue could lead to state corruption in applications, causing inaccurate outcomes or service disruptions. Attackers need specific conditions to exploit this flaw, including the ability to manipulate the algorithm's use and reliance on certain system registers by the application.

pyup-scheduled-update-2024-04-01

1 month ago

77ff6642

Update prospector from 1.7.7 to 1.10.3

py 1.11.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.11.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287

Package

Installed

Affected

Info

py

1.11.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyup-scheduled-update-2024-04-01

1 month ago

27eca049

Update py from 1.10.0 to 1.11.0

py 1.11.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.11.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287

Package

Installed

Affected

Info

py

1.11.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

pyup-scheduled-update-2024-04-01

1 month ago

aa39f05f

Update pyyaml from 5.4.1 to 6.0.1

py 1.11.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.11.0	<=1.11.0	show Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287

Package

Installed

Affected

Info

py

1.11.0

<=1.11.0

show

Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287