Safety CI > h0rn3t/fastapi-async-sqlalchemy

Docs | Support

h0rn3t/fastapi-async-sqlalchemy

Requirements Safety CI

main

1 year, 4 months ago

b2c4be44

support sqlalchemy from 1.4.18 to 2.0+, fix #12

certifi 2022.12.7 has known security vulnerabilities.

Package

Installed

Affected

Info

certifi

2022.12.7

>=2021.05.30,<2024.07.04

show

Certifi affected versions recognized root certificates from GLOBALTRUST. Certifi patch removes these root certificates from the root store. These certificates are being removed pursuant to an investigation that identified "long-running and unresolved compliance issues" and are also in the process of being removed from Mozilla's trust store.

certifi

2022.12.7

>=2015.04.28,<2023.07.22

show

Certifi 2023.07.22 includes a fix for CVE-2023-37920: Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.
https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7

main

1 year, 7 months ago

230b991a

security update

No dependencies with known security vulnerabilities.

main

1 year, 8 months ago

cdddf6bd

update README.md

No dependencies with known security vulnerabilities.

main

1 year, 8 months ago

57d690fe

update README.md

No dependencies with known security vulnerabilities.

main

1 year, 8 months ago

b6e5b658

fix security issue

No dependencies with known security vulnerabilities.

main

1 year, 8 months ago

73bcba72

bump version

No dependencies with known security vulnerabilities.

main

1 year, 8 months ago

6d2c099a

fix #11

No dependencies with known security vulnerabilities.

main

1 year, 8 months ago

5545d764

isort

No dependencies with known security vulnerabilities.

main

1 year, 8 months ago

364937f8

bump version

No dependencies with known security vulnerabilities.

main

1 year, 8 months ago

03ff9e24

Merge pull request #10 from kieled/main SQLAlchemy 2.x update

No dependencies with known security vulnerabilities.

main

1 year, 9 months ago

8f499899

fix tests

No dependencies with known security vulnerabilities.

main

1 year, 9 months ago

f65bdfe2

fix tests

py 1.11.0 and fastapi 0.90.0 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.11.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
fastapi	0.90.0	<=0.109.0	show Fastapi 0.109.1 updates its minimum version of 'python-multipart' to >=0.0.7 to include a security fix.
fastapi	0.90.0	<0.92.0	show Fastapi 0.92.0 updates its dependency 'Starlette' to v0.25.0 to include a security fix.
fastapi	0.90.0	<0.109.1	show FastAPI 0.109.1 addresses a critical security issue by upgrading its dependency python-multipart to version >=0.0.7. The upgrade mitigates a Regular Expression Denial of Service (ReDoS) vulnerability, which occurs when parsing form data. https://github.com/tiangolo/fastapi/security/advisories/GHSA-qf9m-vfgh-m389
fastapi	0.90.0	<0.95.2	show Fastapi 0.95.2 updates its dependency 'Starlette' to versions '>=0.27.0' to include a security fix.

main

1 year, 9 months ago

86a4a6e8

fix tests

py 1.11.0 and fastapi 0.72.0 have known security vulnerabilities.

Package	Installed	Affected	Info
py	1.11.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
fastapi	0.72.0	<0.75.2	show Fastapi 0.75.2 updates its NPM dependency 'swagger-ui' to include security fixes.
fastapi	0.72.0	<=0.109.0	show Fastapi 0.109.1 updates its minimum version of 'python-multipart' to >=0.0.7 to include a security fix.
fastapi	0.72.0	<0.92.0	show Fastapi 0.92.0 updates its dependency 'Starlette' to v0.25.0 to include a security fix.
fastapi	0.72.0	<0.75.2	show Fastapi 0.75.2 updates its dependency 'ujson' ranges to include a security fix.
fastapi	0.72.0	<0.75.2	show Fastapi 0.75.2 updates its NPM dependency 'swagger-ui' to include security fixes.
fastapi	0.72.0	<0.109.1	show FastAPI 0.109.1 addresses a critical security issue by upgrading its dependency python-multipart to version >=0.0.7. The upgrade mitigates a Regular Expression Denial of Service (ReDoS) vulnerability, which occurs when parsing form data. https://github.com/tiangolo/fastapi/security/advisories/GHSA-qf9m-vfgh-m389
fastapi	0.72.0	<0.95.2	show Fastapi 0.95.2 updates its dependency 'Starlette' to versions '>=0.27.0' to include a security fix.

main

1 year, 9 months ago

3fb7958d

fix tests

py 1.11.0 has known security vulnerabilities.

Package

Installed

Affected

Info

py

1.11.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

main

1 year, 9 months ago

18ca58b1

some fixes, upgrade pre-commit plugins

py 1.11.0 has known security vulnerabilities.

Package

Installed

Affected

Info

py

1.11.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

older