Safety CI > just-work/django-video-transcoding

pyup-update-sphinxcontrib-seqdiag-2.0.0-to-3.0.0

4 years, 9 months ago

70c7e147

Update sphinxcontrib-seqdiag from 2.0.0 to 3.0.0

No dependencies with known security vulnerabilities.

pyup-update-sphinxcontrib-blockdiag-2.0.0-to-3.0.0

4 years, 9 months ago

e1c83909

Update sphinxcontrib-blockdiag from 2.0.0 to 3.0.0

No dependencies with known security vulnerabilities.

master

4 years, 9 months ago

b8b1b90e

Merge pull request #189 from just-work/pyup-update-sphinx-4.3.0-to-4.3.1 Update sphinx to 4.3.1

No dependencies with known security vulnerabilities.

pyup-update-sphinx-4.3.0-to-4.3.1

4 years, 9 months ago

3a176a75

Update sphinx from 4.3.0 to 4.3.1

No dependencies with known security vulnerabilities.

master

4 years, 9 months ago

6aae1dbf

Merge pull request #188 from just-work/pyup-update-types-requests-2.26.0-to-2.26.1 Update types-req

No dependencies with known security vulnerabilities.

pyup-update-types-requests-2.26.0-to-2.26.1

4 years, 9 months ago

d8481586

Update types-requests from 2.26.0 to 2.26.1

No dependencies with known security vulnerabilities.

master

4 years, 10 months ago

70cba9bc

Merge pull request #187 from just-work/pyup-update-celery-5.2.0-to-5.2.1 Update celery to 5.2.1

No dependencies with known security vulnerabilities.

pyup-update-celery-5.2.0-to-5.2.1

4 years, 10 months ago

7fe1a2bd

Update celery from 5.2.0 to 5.2.1

No dependencies with known security vulnerabilities.

master

4 years, 10 months ago

6d822931

Merge pull request #186 from just-work/pyup-update-kombu-5.2.1-to-5.2.2 Update kombu to 5.2.2

No dependencies with known security vulnerabilities.

pyup-update-kombu-5.2.1-to-5.2.2

4 years, 10 months ago

e4807de6

Update kombu from 5.2.1 to 5.2.2

No dependencies with known security vulnerabilities.

master

4 years, 10 months ago

92af718e

Merge pull request #185 from just-work/pyup-update-sphinx-4.2.0-to-4.3.0 Update sphinx to 4.3.0

No dependencies with known security vulnerabilities.

pyup-update-sphinx-4.2.0-to-4.3.0

4 years, 10 months ago

3caeed67

Update sphinx from 4.2.0 to 4.3.0

No dependencies with known security vulnerabilities.

master

4 years, 10 months ago

3d1d2e1a

Merge pull request #184 from just-work/pyup-update-types-requests-2.25.12-to-2.26.0 Update types-re

No dependencies with known security vulnerabilities.

pyup-update-types-requests-2.25.12-to-2.26.0

4 years, 10 months ago

5012e88c

Update types-requests from 2.25.12 to 2.26.0

No dependencies with known security vulnerabilities.

master

4 years, 10 months ago

5b5f1828

Merge pull request #183 from just-work/pyup-update-types-requests-2.25.11-to-2.25.12 Update types-r

Celery 5.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Celery	5.2.0	<5.2.2	show Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

Package

Installed

Affected

Info

Celery

5.2.0

<5.2.2

show

Celery 5.2.2 includes a fix for CVE-2021-23727: Celery before 5.2.2. by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.