Safety CI > hXtreme/flask-easyapi

pyup-scheduled-update-2021-02-15

5 years, 2 months ago

c9e17e43

Update tox from 3.20.1 to 3.21.4

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-02-15

5 years, 2 months ago

7bd152bd

Update twine from 3.2.0 to 3.3.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-02-15

5 years, 2 months ago

a6fba2d9

Update sphinx from 3.3.1 to 3.5.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-02-15

5 years, 2 months ago

7a84807b

Update sphinx-rtd-theme from 0.5.0 to 0.5.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-02-15

5 years, 2 months ago

614986f1

Update pyyaml from 5.3.1 to 5.4.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-02-15

5 years, 2 months ago

5ea5fddb

Update pytest from 6.2.0 to 6.2.2

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	>=5.3.1,<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

>=5.3.1,<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

pyup-scheduled-update-2021-02-15

5 years, 2 months ago

81fd0e90

Update pytest-runner from 5.2 to 5.3.0

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	>=5.3.1,<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

>=5.3.1,<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

pyup-scheduled-update-2021-02-15

5 years, 2 months ago

8c2521e9

Update pip from 20.3.1 to 21.0.1

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	>=5.3.1,<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

>=5.3.1,<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

pyup-scheduled-update-2021-02-15

5 years, 2 months ago

f0f8b168

Update coverage from 5.3 to 5.4

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	>=5.3.1,<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

>=5.3.1,<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

pyup-scheduled-update-2021-02-08

5 years, 2 months ago

e2893f62

Update watchdog from 1.0.1 to 1.0.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-02-08

5 years, 2 months ago

d97fb605

Update twine from 3.2.0 to 3.3.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-02-08

5 years, 2 months ago

837aeae8

Update tox from 3.20.1 to 3.21.4

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-02-08

5 years, 2 months ago

83f14e10

Update sphinx from 3.3.1 to 3.4.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-02-08

5 years, 2 months ago

9d21fef1

Update sphinx-rtd-theme from 0.5.0 to 0.5.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-02-08

5 years, 2 months ago

3f83d246

Update pyyaml from 5.3.1 to 5.4.1

No dependencies with known security vulnerabilities.