Safety CI > hydrosquall/tiingo-python

pyup-update-pip-24.0-to-24.1.2

1 year, 7 months ago

440165ee

Update pip from 24.0 to 24.1.2

No dependencies with known security vulnerabilities.

pyup-update-tox-4.15.0-to-4.16.0

1 year, 7 months ago

db08acbc

Update tox from 4.15.0 to 4.16.0

No dependencies with known security vulnerabilities.

pyup-update-pip-24.0-to-24.1.1

1 year, 7 months ago

053afec6

Update pip from 24.0 to 24.1.1

No dependencies with known security vulnerabilities.

pyup-update-twine-5.1.0-to-5.1.1

1 year, 7 months ago

e3785ab4

Update twine from 5.1.0 to 5.1.1

No dependencies with known security vulnerabilities.

pyup-update-coverage-7.5.1-to-7.5.4

1 year, 7 months ago

a32a178b

Update coverage from 7.5.1 to 7.5.4

No dependencies with known security vulnerabilities.

pyup-update-pip-24.0-to-24.1

1 year, 7 months ago

a3defb33

Update pip from 24.0 to 24.1

No dependencies with known security vulnerabilities.

snyk-fix-c9eccaf5e848e01ad8d70267ead67053

1 year, 7 months ago

268514dc

fix: binder/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by

No dependencies with known security vulnerabilities.

snyk-fix-d2b95a549ea7e477a9a96adaad66836f

1 year, 7 months ago

dc942cb0

fix: docs/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pi

No dependencies with known security vulnerabilities.

pyup-update-flake8-7.0.0-to-7.1.0

1 year, 7 months ago

c3672575

Update flake8 from 7.0.0 to 7.1.0

No dependencies with known security vulnerabilities.

master

1 year, 7 months ago

8a222fbe

Merge pull request #1001 from hydrosquall/pyup-update-cryptography-42.0.7-to-42.0.8 Update cryptogr

No dependencies with known security vulnerabilities.

pyup-update-tox-4.15.0-to-4.15.1

1 year, 8 months ago

9126b777

Update tox from 4.15.0 to 4.15.1

No dependencies with known security vulnerabilities.

pyup-update-pytest-8.2.1-to-8.2.2

1 year, 8 months ago

40a3a6ef

Update pytest from 8.2.1 to 8.2.2

No dependencies with known security vulnerabilities.

pyup-update-cryptography-42.0.7-to-42.0.8

1 year, 8 months ago

5d5a30d5

Update cryptography from 42.0.7 to 42.0.8

No dependencies with known security vulnerabilities.

pyup-update-coverage-7.5.1-to-7.5.3

1 year, 8 months ago

b27646e6

Update coverage from 7.5.1 to 7.5.3

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	<25.2	show Affected versions of the pip package are vulnerable to Arbitrary File Overwrite due to improper validation of symbolic link targets in the fallback tar extraction code. In src/pip/_internal/utils/unpacking.py, the _untar_without_filter routine used when the Python tarfile module lacks PEP 706 (no tarfile.data_filter) extracted symlink members with tar._extract_member without verifying that link destinations resolve under the extraction root, a check later added via the is_symlink_target_in_tar helper.
pip	24.0	<26.0	show Affected versions of the pip package are vulnerable to Path Traversal due to an incorrect directory containment check when extracting wheel archives. In src/pip/_internal/utils/unpacking.py, the is_within_directory() helper used os.path.commonprefix() (character-by-character) to compare directory and target paths, allowing crafted paths like a parent-directory substring match to be treated as safely inside the installation directory.
pip	24.0	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

24.0

<25.2

show

Affected versions of the pip package are vulnerable to Arbitrary File Overwrite due to improper validation of symbolic link targets in the fallback tar extraction code. In src/pip/_internal/utils/unpacking.py, the _untar_without_filter routine used when the Python tarfile module lacks PEP 706 (no tarfile.data_filter) extracted symlink members with tar._extract_member without verifying that link destinations resolve under the extraction root, a check later added via the is_symlink_target_in_tar helper.

pip

24.0

<26.0

show

Affected versions of the pip package are vulnerable to Path Traversal due to an incorrect directory containment check when extracting wheel archives. In src/pip/_internal/utils/unpacking.py, the is_within_directory() helper used os.path.commonprefix() (character-by-character) to compare directory and target paths, allowing crafted paths like a parent-directory substring match to be treated as safely inside the installation directory.

pip

24.0

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

pyup-update-coverage-7.5.1-to-7.5.2

1 year, 8 months ago

3f256263

Update coverage from 7.5.1 to 7.5.2

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	<25.2	show Affected versions of the pip package are vulnerable to Arbitrary File Overwrite due to improper validation of symbolic link targets in the fallback tar extraction code. In src/pip/_internal/utils/unpacking.py, the _untar_without_filter routine used when the Python tarfile module lacks PEP 706 (no tarfile.data_filter) extracted symlink members with tar._extract_member without verifying that link destinations resolve under the extraction root, a check later added via the is_symlink_target_in_tar helper.
pip	24.0	<26.0	show Affected versions of the pip package are vulnerable to Path Traversal due to an incorrect directory containment check when extracting wheel archives. In src/pip/_internal/utils/unpacking.py, the is_within_directory() helper used os.path.commonprefix() (character-by-character) to compare directory and target paths, allowing crafted paths like a parent-directory substring match to be treated as safely inside the installation directory.
pip	24.0	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

24.0

<25.2

show

Affected versions of the pip package are vulnerable to Arbitrary File Overwrite due to improper validation of symbolic link targets in the fallback tar extraction code. In src/pip/_internal/utils/unpacking.py, the _untar_without_filter routine used when the Python tarfile module lacks PEP 706 (no tarfile.data_filter) extracted symlink members with tar._extract_member without verifying that link destinations resolve under the extraction root, a check later added via the is_symlink_target_in_tar helper.

pip

24.0

<26.0

show

Affected versions of the pip package are vulnerable to Path Traversal due to an incorrect directory containment check when extracting wheel archives. In src/pip/_internal/utils/unpacking.py, the is_within_directory() helper used os.path.commonprefix() (character-by-character) to compare directory and target paths, allowing crafted paths like a parent-directory substring match to be treated as safely inside the installation directory.

pip

24.0

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.