Safety CI > irrdnet/irrd

pyup-scheduled-update-2021-08-30

3 years, 9 months ago

1a01ab1a

Update wheel from 0.36.2 to 0.37.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-30

3 years, 9 months ago

f1ed4df8

Update pep8-naming from 0.12.0 to 0.12.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-30

3 years, 9 months ago

467798f8

Update twisted from 21.2.0 to 21.7.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-30

3 years, 9 months ago

2cf13f82

Update sphinx from 4.1.1 to 4.1.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-30

3 years, 9 months ago

6bab1542

Update ujson from 4.0.2 to 4.1.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-30

3 years, 9 months ago

0716418a

Update uvicorn from 0.14.0 to 0.15.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-30

3 years, 9 months ago

565a61f5

Update uvicorn from 0.14.0 to 0.15.0

No dependencies with known security vulnerabilities.

main

3 years, 9 months ago

0bcd9d3f

Fix #543 - Include prefix ranges in route-set expansion

No dependencies with known security vulnerabilities.

issue543

3 years, 9 months ago

53406180

Fix #543 - Include prefix ranges in route-set expansion

No dependencies with known security vulnerabilities.

main

3 years, 9 months ago

c904fb94

Various documentation tweaks

No dependencies with known security vulnerabilities.

stable/4.1.x

3 years, 9 months ago

8efe5a81

[4.1.x] Fix #542 - Disable confusing log lines (cherry picked from commit fdffb4ade566abf34a2a1b2e9

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

main

3 years, 9 months ago

fdffb4ad

Fix #542 - Disable confusing log lines

No dependencies with known security vulnerabilities.

socket-hacking

3 years, 9 months ago

4814c5ef

bla

No dependencies with known security vulnerabilities.

socket-hacking

3 years, 9 months ago

94a712d0

bla

No dependencies with known security vulnerabilities.

socket-hacking

3 years, 9 months ago

4c727497

bla

No dependencies with known security vulnerabilities.