Safety CI > hydrosquall/tiingo-python

pyup-update-pandas-1.5.3-to-2.2.2

3 weeks, 2 days ago

1ca2a030

Update pandas from 1.5.3 to 2.2.2

pip 24.0 and black 24.2.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.
black	24.2.0	<24.3.0	show Black before 24.3.0 have a security vulnerability where specific code formatting patterns could lead to arbitrary code execution. This issue arises from the unsafe handling of AST nodes, potentially allowing an attacker to execute code when Black formats a maliciously crafted Python file. https://github.com/psf/black/commit/f00093672628d212b8965a8993cee8bedf5fe9b8

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

black

24.2.0

<24.3.0

show

Black before 24.3.0 have a security vulnerability where specific code formatting patterns could lead to arbitrary code execution. This issue arises from the unsafe handling of AST nodes, potentially allowing an attacker to execute code when Black formats a maliciously crafted Python file.	
https://github.com/psf/black/commit/f00093672628d212b8965a8993cee8bedf5fe9b8

pyup-update-tox-4.14.1-to-4.14.2

1 month, 1 week ago

5333322b

Update tox from 4.14.1 to 4.14.2

black 24.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
black	24.2.0	<24.3.0	show Black before 24.3.0 have a security vulnerability where specific code formatting patterns could lead to arbitrary code execution. This issue arises from the unsafe handling of AST nodes, potentially allowing an attacker to execute code when Black formats a maliciously crafted Python file. https://github.com/psf/black/commit/f00093672628d212b8965a8993cee8bedf5fe9b8

Package

Installed

Affected

Info

black

24.2.0

<24.3.0

show

Black before 24.3.0 have a security vulnerability where specific code formatting patterns could lead to arbitrary code execution. This issue arises from the unsafe handling of AST nodes, potentially allowing an attacker to execute code when Black formats a maliciously crafted Python file.	
https://github.com/psf/black/commit/f00093672628d212b8965a8993cee8bedf5fe9b8

pyup-update-black-24.2.0-to-24.3.0

1 month, 2 weeks ago

3e46bcb4

Update black from 24.2.0 to 24.3.0