Safety CI > ioparaskev/fcrypter

pyup-update-pyyaml-3.11-to-5.3.1

4 years ago

f9e6e655

Update pyyaml from 3.11 to 5.3.1

No dependencies with known security vulnerabilities.

dependabot/pip/pyyaml-5.1

4 years, 7 months ago

c573e97b

Bump pyyaml from 3.11 to 5.1 Bumps [pyyaml](https://github.com/yaml/pyyaml) from 3.11 to 5.1. - [Re

No dependencies with known security vulnerabilities.

pyup-update-cryptography-1.7-to-2.3

5 years, 9 months ago

e457bd5f

Update cryptography from 1.7 to 2.3

PyYAML 3.11 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.11	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466
PyYAML	3.11	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
PyYAML	3.11	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

Package

Installed

Affected

Info

PyYAML

3.11

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

PyYAML

3.11

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

PyYAML

3.11

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

pyup-update-pyyaml-3.11-to-3.13

5 years, 9 months ago

7cba2521

Update pyyaml from 3.11 to 3.13

PyYAML 3.13 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.13	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466
PyYAML	3.13	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
PyYAML	3.13	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

Package

Installed

Affected

Info

PyYAML

3.13

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

PyYAML

3.13

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

PyYAML

3.13

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

master

7 years, 2 months ago

3b6f780e

Change version to 0.1.1

No dependencies with known security vulnerabilities.

master

7 years, 2 months ago

0104843f

Add key padding when encr key size not supported If decryption key size is not supported or encr ke

No dependencies with known security vulnerabilities.

master

7 years, 2 months ago

c4d7bd15

Sphinx documentation fixes

No dependencies with known security vulnerabilities.

master

7 years, 2 months ago

0acf26e5

minor badge fixes

No dependencies with known security vulnerabilities.

master

7 years, 2 months ago

a18a79aa

Add absolute importing & utf-8 encoding flag

No dependencies with known security vulnerabilities.

master

7 years, 2 months ago

1df925e1

Add cli options

No dependencies with known security vulnerabilities.

master

7 years, 2 months ago

d4e6d61b

Add Cryptor abstract class

No dependencies with known security vulnerabilities.

master

7 years, 2 months ago

48a6d0af

Remove py26 from tox

No dependencies with known security vulnerabilities.

master

7 years, 2 months ago

a3dbb2be

Remove py26 from tox

No dependencies with known security vulnerabilities.

master

7 years, 2 months ago

cc5b9056

Remove py26 from tox

No dependencies with known security vulnerabilities.

master

7 years, 2 months ago

0a35bc0e

Remove py26 from tox

No dependencies with known security vulnerabilities.