Safety CI > imAsparky/django-cookiecutter

issue-349

3 years, 2 months ago

714fa246

feat(test): Add override settings to conftest #349 Adds a simple and consistent way to override set

cookiecutter 1.7.3 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	1.7.3	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

1.7.3

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

pyup-update-django-tailwind-3.1.1-to-3.3.0

3 years, 2 months ago

b61c504c

Update django-tailwind from 3.1.1 to 3.3.0

cookiecutter 1.7.3 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	1.7.3	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

1.7.3

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

pyup-update-django-tailwind-3.1.1-to-3.2.0

3 years, 2 months ago

f218d5e2

Update django-tailwind from 3.1.1 to 3.2.0

cookiecutter 1.7.3 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	1.7.3	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

1.7.3

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

pyup-update-sphinx-4.5.0-to-5.0.2

3 years, 2 months ago

382b7d4b

Update sphinx from 4.5.0 to 5.0.2

cookiecutter 1.7.3 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	1.7.3	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

1.7.3

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

pyup-update-sphinx-4.5.0-to-5.0.2

3 years, 2 months ago

fedfa7b8

Update sphinx from 4.5.0 to 5.0.2

cookiecutter 1.7.3 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	1.7.3	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

1.7.3

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

main

3 years, 2 months ago

66c7fc7c

Update django-environ from 0.8.1 to 0.9.0 (#346) Co-authored-by: mark sevelj <31756570+imAsparky@us

cookiecutter 1.7.3 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	1.7.3	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

1.7.3

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

pyup-update-django-environ-0.8.1-to-0.9.0

3 years, 2 months ago

ad715546

Merge branch 'main' into pyup-update-django-environ-0.8.1-to-0.9.0

cookiecutter 1.7.3 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	1.7.3	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

1.7.3

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

main

3 years, 2 months ago

02b6bc16

fix(pyup): Update myst-parser to 0.18.0 (#345) * Update myst-parser from 0.17.2 to 0.18.0 * Upd

cookiecutter 1.7.3 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	1.7.3	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

1.7.3

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

pyup-update-myst-parser-0.17.2-to-0.18.0

3 years, 2 months ago

911971f4

Merge branch 'main' into pyup-update-myst-parser-0.17.2-to-0.18.0

cookiecutter 1.7.3 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	1.7.3	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

1.7.3

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

main

3 years, 2 months ago

07ad12c8

Update django-browser-reload from 1.5.0 to 1.6.0 (#344) Co-authored-by: mark sevelj <31756570+imAsp

cookiecutter 1.7.3 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	1.7.3	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

1.7.3

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

pyup-update-django-browser-reload-1.5.0-to-1.6.0

3 years, 2 months ago

bc24b5be

Merge branch 'main' into pyup-update-django-browser-reload-1.5.0-to-1.6.0

cookiecutter 1.7.3 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	1.7.3	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

1.7.3

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

main

3 years, 2 months ago

f3cd5d6a

Update django-htmx from 1.11.0 to 1.12.0 (#343) Co-authored-by: mark sevelj <31756570+imAsparky@use

cookiecutter 1.7.3 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	1.7.3	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

1.7.3

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

pyup-update-cookiecutter-1.7.3-to-2.1.0

3 years, 2 months ago

acb095ce

Merge branch 'main' into pyup-update-cookiecutter-1.7.3-to-2.1.0

cookiecutter 2.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	2.1.0	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

2.1.0

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

pyup-update-cookiecutter-1.7.3-to-2.1.1

3 years, 2 months ago

f10edc42

fix(pyup): Update cookiecutter to 2.1.0

No dependencies with known security vulnerabilities.

pyup-update-django-htmx-1.11.0-to-1.12.0

3 years, 2 months ago

9f8d0575

Merge branch 'main' into pyup-update-django-htmx-1.11.0-to-1.12.0

cookiecutter 1.7.3 has known security vulnerabilities.

Package	Installed	Affected	Info
cookiecutter	1.7.3	<2.1.1	show Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Package

Installed

Affected

Info

cookiecutter

1.7.3

<2.1.1

show

Cookiecutter 2.1.1 includes a fix for CVE-2022-24065: Cookiecutter before 2.1.1 is vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.