Safety CI > hydrosquall/tiingo-python

pyup-update-pytest-5.3.5-to-5.4.2

5 years, 9 months ago

e1f1fc08

Update pytest from 5.3.5 to 5.4.2

No dependencies with known security vulnerabilities.

master

5 years, 9 months ago

2f5565d3

Merge pull request #452 from hydrosquall/pyup-update-tox-3.14.6-to-3.15.0 Update tox to 3.15.0

No dependencies with known security vulnerabilities.

pyup-update-tox-3.14.6-to-3.15.0

5 years, 9 months ago

104177ce

Update tox from 3.14.6 to 3.15.0

No dependencies with known security vulnerabilities.

pyup-update-pip-19.3.1-to-20.1

5 years, 9 months ago

3e7c0c65

Update pip from 19.3.1 to 20.1

No dependencies with known security vulnerabilities.

master

5 years, 9 months ago

15932836

Merge pull request #450 from hydrosquall/pyup-update-sphinx-3.0.1-to-3.0.3 Update sphinx to 3.0.3

No dependencies with known security vulnerabilities.

pyup-update-sphinx-3.0.1-to-3.0.3

5 years, 9 months ago

8081401a

Update sphinx from 3.0.1 to 3.0.3

No dependencies with known security vulnerabilities.

pyup-update-cryptography-2.8-to-2.9.2

5 years, 9 months ago

97e07434

Update cryptography from 2.8 to 2.9.2

No dependencies with known security vulnerabilities.

pyup-update-cryptography-2.8-to-2.9.1

5 years, 9 months ago

d31a3629

Update cryptography from 2.8 to 2.9.1

No dependencies with known security vulnerabilities.

pyup-update-sphinx-3.0.1-to-3.0.2

5 years, 9 months ago

5bde1cdb

Update sphinx from 3.0.1 to 3.0.2

No dependencies with known security vulnerabilities.

pyup-update-cryptography-2.8-to-2.9

5 years, 9 months ago

088d4ae6

Update cryptography from 2.8 to 2.9

No dependencies with known security vulnerabilities.

pyup-update-coverage-5.0.4-to-5.1

5 years, 9 months ago

ab3237c3

Update coverage from 5.0.4 to 5.1

No dependencies with known security vulnerabilities.

master

5 years, 10 months ago

7846fa89

Merge pull request #439 from hydrosquall/pyup-update-sphinx-2.3.1-to-3.0.1 Update sphinx to 3.0.1

No dependencies with known security vulnerabilities.

master

5 years, 10 months ago

573f0d49

Merge pull request #414 from hydrosquall/pyup-update-wheel-0.33.6-to-0.34.2 Update wheel to 0.34.2

No dependencies with known security vulnerabilities.

master

5 years, 10 months ago

1154a60b

Merge pull request #435 from hydrosquall/pyup-update-pyyaml-5.3-to-5.3.1 Update pyyaml to 5.3.1

No dependencies with known security vulnerabilities.

pyup-update-coverage-5.0.4-to-5.1

5 years, 10 months ago

5fa0e91b

Update coverage from 5.0.4 to 5.1

PyYAML 5.3 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
PyYAML	5.3	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

PyYAML

5.3

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466