Safety CI > just-work/django-video-transcoding

pyup-update-types-requests-2.25.12-to-2.26.0

3 years, 10 months ago

5012e88c

Update types-requests from 2.25.12 to 2.26.0

No dependencies with known security vulnerabilities.

master

3 years, 10 months ago

5b5f1828

Merge pull request #183 from just-work/pyup-update-types-requests-2.25.11-to-2.25.12 Update types-r

Celery 5.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Celery	5.2.0	<5.2.2	show Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

Package

Installed

Affected

Info

Celery

5.2.0

<5.2.2

show

Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

pyup-update-types-requests-2.25.11-to-2.25.12

3 years, 10 months ago

ddaa1577

Update types-requests from 2.25.11 to 2.25.12

Celery 5.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Celery	5.2.0	<5.2.2	show Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

Package

Installed

Affected

Info

Celery

5.2.0

<5.2.2

show

Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

master

3 years, 10 months ago

9a93bae1

Merge pull request #182 from just-work/pyup-update-celery-5.1.2-to-5.2.0 Update celery to 5.2.0

No dependencies with known security vulnerabilities.

pyup-update-celery-5.1.2-to-5.2.0

3 years, 10 months ago

2cba717d

New kombu and celery support See #181, #182

No dependencies with known security vulnerabilities.

pyup-update-celery-5.1.2-to-5.2.0

3 years, 10 months ago

4fbe2ed7

Update celery from 5.1.2 to 5.2.0

No dependencies with known security vulnerabilities.

pyup-update-kombu-5.1.0-to-5.2.1

3 years, 10 months ago

3a051213

Update kombu from 5.1.0 to 5.2.1

No dependencies with known security vulnerabilities.

pyup-update-kombu-5.1.0-to-5.2.0

3 years, 10 months ago

8d54943a

Update kombu from 5.1.0 to 5.2.0

No dependencies with known security vulnerabilities.

pyup-update-django-3.2.8-to-3.2.9

3 years, 10 months ago

6629b74f

Update django from 3.2.8 to 3.2.9

No dependencies with known security vulnerabilities.

master

3 years, 11 months ago

5ad294f5

Merge pull request #178 from just-work/pyup-update-fffw-3.4.0-to-3.4.1 Update fffw to 3.4.1

No dependencies with known security vulnerabilities.

master

3 years, 11 months ago

250f35d2

Merge pull request #179 from tumb1er/python-3.10 Python 3.10

No dependencies with known security vulnerabilities.

pyup-update-fffw-3.4.0-to-3.4.1

3 years, 11 months ago

ac1fd4db

Update fffw from 3.4.0 to 3.4.1

No dependencies with known security vulnerabilities.

master

3 years, 11 months ago

42e517a1

Merge pull request #176 from just-work/pyup-update-django-model-utils-4.1.1-to-4.2.0 Update django-

No dependencies with known security vulnerabilities.

pyup-update-django-model-utils-4.1.1-to-4.2.0

3 years, 11 months ago

c047a207

#176 Update django-model-utils in setup.py

No dependencies with known security vulnerabilities.

master

3 years, 11 months ago

53e77cf2

Merge pull request #177 from tumb1er/codecov_v2 Use codecov v2 action with new uploader

No dependencies with known security vulnerabilities.