Safety CI > h0rn3t/fastapi-async-sqlalchemy

main

11 months, 1 week ago

06fbf660

Merge pull request #19 from shepilov-vladislav/main bug fix for multiple databases support, fix #17

No dependencies with known security vulnerabilities.

main

11 months, 1 week ago

cb98d48d

pytest fixes

No dependencies with known security vulnerabilities.

main

11 months, 1 week ago

992f9b8e

pydantic==1.10.13

No dependencies with known security vulnerabilities.

main

11 months, 1 week ago

cb52c9df

pytest_asyncio

pydantic 1.10.2 has known security vulnerabilities.

Package	Installed	Affected	Info
pydantic	1.10.2	>=2.0.0,<2.4.0 , <1.10.13	show Regular expression denial of service in Pydanic affected versions allows remote attackers to cause denial of service via a crafted email string.
pydantic	1.10.2	<1.10.13 , >=2.0a1,<2.4.0	show Pydantic 1.10.13 and 2.4.0 include a fix for a regular expression denial of service vulnerability (REDoS). https://github.com/pydantic/pydantic/pull/7360 https://github.com/pydantic/pydantic/pull/7673

Package

Installed

Affected

Info

pydantic

1.10.2

>=2.0.0,<2.4.0 , <1.10.13

show

Regular expression denial of service in Pydanic affected versions allows remote attackers to cause denial of service via a crafted email string.

pydantic

1.10.2

<1.10.13 , >=2.0a1,<2.4.0

show

Pydantic 1.10.13 and 2.4.0 include a fix for a regular expression denial of service vulnerability (REDoS).
https://github.com/pydantic/pydantic/pull/7360
https://github.com/pydantic/pydantic/pull/7673

main

1 year, 3 months ago

d40c93e0

Update README.md

No dependencies with known security vulnerabilities.

main

1 year, 3 months ago

2a9dd8fa

bump version

No dependencies with known security vulnerabilities.

main

1 year, 3 months ago

437b7dd3

Merge pull request #15 from prepwork/feature/use-multiple-databases Enable usage of multiple databa

No dependencies with known security vulnerabilities.

main

1 year, 4 months ago

307c640e

pre-commit

No dependencies with known security vulnerabilities.

main

1 year, 4 months ago

fd7fee13

pre-commit

No dependencies with known security vulnerabilities.

main

1 year, 4 months ago

fe53e281

pre-commit

No dependencies with known security vulnerabilities.

main

1 year, 4 months ago

066cd009

pre-commit

No dependencies with known security vulnerabilities.

main

1 year, 4 months ago

8c9312d7

pre-commit

No dependencies with known security vulnerabilities.

main

1 year, 4 months ago

cfc9c095

pre-commit

No dependencies with known security vulnerabilities.

main

1 year, 4 months ago

6cf8c96d

support sqlalchemy from 1.4.18 to 2.0+, fix #12

No dependencies with known security vulnerabilities.

main

1 year, 4 months ago

2cfba3ae

support sqlalchemy from 1.4.18 to 2.0+, fix #12

certifi 2022.12.7 has known security vulnerabilities.

Package	Installed	Affected	Info
certifi	2022.12.7	>=2021.05.30,<2024.07.04	show Certifi affected versions recognized root certificates from GLOBALTRUST. Certifi patch removes these root certificates from the root store. These certificates are being removed pursuant to an investigation that identified "long-running and unresolved compliance issues" and are also in the process of being removed from Mozilla's trust store.
certifi	2022.12.7	>=2015.04.28,<2023.07.22	show Certifi 2023.07.22 includes a fix for CVE-2023-37920: Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7

Package

Installed

Affected

Info

certifi

2022.12.7

>=2021.05.30,<2024.07.04

show

Certifi affected versions recognized root certificates from GLOBALTRUST. Certifi patch removes these root certificates from the root store. These certificates are being removed pursuant to an investigation that identified "long-running and unresolved compliance issues" and are also in the process of being removed from Mozilla's trust store.

certifi

2022.12.7

>=2015.04.28,<2023.07.22

show

Certifi 2023.07.22 includes a fix for CVE-2023-37920: Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.
https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7