Safety CI > joeirimpan/zammad

master

6 years, 8 months ago

7e40dffa

Merge branch '0.1.7'

No dependencies with known security vulnerabilities.

develop

6 years, 8 months ago

c060361d

feat: Make username, pass optional

No dependencies with known security vulnerabilities.

develop

6 years, 8 months ago

d2c7d75c

feat: Make username, pass optional

No dependencies with known security vulnerabilities.

pyup-update-pytest-3.5.1-to-4.4.1

6 years, 8 months ago

2284fe1b

Update pytest from 3.5.1 to 4.4.1

No dependencies with known security vulnerabilities.

develop

6 years, 8 months ago

b487c87d

updated contributors (#78) Updated contributors also plan to help more where i can :)

No dependencies with known security vulnerabilities.

master

6 years, 8 months ago

1fecdb92

Merge branch '0.1.6'

No dependencies with known security vulnerabilities.

develop

6 years, 8 months ago

5ca1941a

fix: Add context manager for doing req with behalf header

No dependencies with known security vulnerabilities.

develop

6 years, 8 months ago

afd430c3

Added on_behalf_of header. (#74) * Added on_behalf_of header. This header allows for API request

No dependencies with known security vulnerabilities.

pyup-update-pytest-3.5.1-to-4.4.0

6 years, 8 months ago

97dee822

Update pytest from 3.5.1 to 4.4.0

No dependencies with known security vulnerabilities.

develop

6 years, 9 months ago

26ae0bc6

Merge pull request #45 from joeirimpan/pyup-update-vcrpy-1.11.1-to-2.0.1 Update vcrpy to 2.0.1

No dependencies with known security vulnerabilities.

develop

6 years, 9 months ago

62a06a27

Merge pull request #58 from joeirimpan/pyup-update-requests-2.18.4-to-2.21.0 Update requests to 2.2

No dependencies with known security vulnerabilities.

develop

6 years, 9 months ago

33dd1e3f

Merge pull request #71 from howderek/develop Fix Pagination, Add per_page getter/setter, Bump versi

requests 2.18.4 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.18.4	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.18.4	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.18.4	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.18.4	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

pyup-update-pytest-3.5.1-to-4.3.1

6 years, 9 months ago

fd4ced9a

Update pytest from 3.5.1 to 4.3.1

requests 2.18.4 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.18.4	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.18.4	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.18.4	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.18.4	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

pyup-update-flake8-3.5.0-to-3.7.7

6 years, 10 months ago

82ce7522

Update flake8 from 3.5.0 to 3.7.7

requests 2.18.4 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.18.4	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.18.4	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.18.4	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.18.4	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

pyup-update-pytest-3.5.1-to-4.3.0

6 years, 10 months ago

4dfa1de3

Update pytest from 3.5.1 to 4.3.0

requests 2.18.4 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.18.4	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.18.4	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.18.4	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.18.4	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

joeirimpan/zammad_py