Safety CI > just-work/django-video-transcoding

master

4 years, 3 months ago

70cba9bc

Merge pull request #187 from just-work/pyup-update-celery-5.2.0-to-5.2.1 Update celery to 5.2.1

No dependencies with known security vulnerabilities.

pyup-update-celery-5.2.0-to-5.2.1

4 years, 3 months ago

7fe1a2bd

Update celery from 5.2.0 to 5.2.1

No dependencies with known security vulnerabilities.

master

4 years, 3 months ago

6d822931

Merge pull request #186 from just-work/pyup-update-kombu-5.2.1-to-5.2.2 Update kombu to 5.2.2

No dependencies with known security vulnerabilities.

pyup-update-kombu-5.2.1-to-5.2.2

4 years, 3 months ago

e4807de6

Update kombu from 5.2.1 to 5.2.2

No dependencies with known security vulnerabilities.

master

4 years, 3 months ago

92af718e

Merge pull request #185 from just-work/pyup-update-sphinx-4.2.0-to-4.3.0 Update sphinx to 4.3.0

No dependencies with known security vulnerabilities.

pyup-update-sphinx-4.2.0-to-4.3.0

4 years, 3 months ago

3caeed67

Update sphinx from 4.2.0 to 4.3.0

No dependencies with known security vulnerabilities.

master

4 years, 3 months ago

3d1d2e1a

Merge pull request #184 from just-work/pyup-update-types-requests-2.25.12-to-2.26.0 Update types-re

No dependencies with known security vulnerabilities.

pyup-update-types-requests-2.25.12-to-2.26.0

4 years, 3 months ago

5012e88c

Update types-requests from 2.25.12 to 2.26.0

No dependencies with known security vulnerabilities.

master

4 years, 3 months ago

5b5f1828

Merge pull request #183 from just-work/pyup-update-types-requests-2.25.11-to-2.25.12 Update types-r

Celery 5.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Celery	5.2.0	<5.2.2	show Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

Package

Installed

Affected

Info

Celery

5.2.0

<5.2.2

show

Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

pyup-update-types-requests-2.25.11-to-2.25.12

4 years, 3 months ago

ddaa1577

Update types-requests from 2.25.11 to 2.25.12

Celery 5.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Celery	5.2.0	<5.2.2	show Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

Package

Installed

Affected

Info

Celery

5.2.0

<5.2.2

show

Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

master

4 years, 3 months ago

9a93bae1

Merge pull request #182 from just-work/pyup-update-celery-5.1.2-to-5.2.0 Update celery to 5.2.0

No dependencies with known security vulnerabilities.

pyup-update-celery-5.1.2-to-5.2.0

4 years, 3 months ago

2cba717d

New kombu and celery support See #181, #182

No dependencies with known security vulnerabilities.

pyup-update-celery-5.1.2-to-5.2.0

4 years, 3 months ago

4fbe2ed7

Update celery from 5.1.2 to 5.2.0

No dependencies with known security vulnerabilities.

pyup-update-kombu-5.1.0-to-5.2.1

4 years, 3 months ago

3a051213

Update kombu from 5.1.0 to 5.2.1

No dependencies with known security vulnerabilities.

pyup-update-kombu-5.1.0-to-5.2.0

4 years, 3 months ago

8d54943a

Update kombu from 5.1.0 to 5.2.0

No dependencies with known security vulnerabilities.