Safety CI > kenneyhe/BingRewards

circleci/v2upgrade

6 years, 5 months ago

a1c49414

add workflow and test test workflow template

No dependencies with known security vulnerabilities.

circleci/v2upgrade

6 years, 5 months ago

abdaa76a

add build fix build issue

No dependencies with known security vulnerabilities.

circleci/v2upgrade

6 years, 5 months ago

45100865

add test_code trying to fix with below job guide https://circleci.com/docs/2.0/configuration-refere

No dependencies with known security vulnerabilities.

circleci/v2upgrade

6 years, 5 months ago

f9e48c71

reformat, fix and v2 template add workflow, deploy and others.

No dependencies with known security vulnerabilities.

circleci/v2upgrade

6 years, 5 months ago

81f6e85b

delete v1 remove the file circle.yml

No dependencies with known security vulnerabilities.

circleci/v2upgrade

6 years, 5 months ago

20ce5c53

fix spaces and add 2.0 run with version 2.0

No dependencies with known security vulnerabilities.

circleci/v2upgrade

6 years, 5 months ago

b88a25db

fix steps add steps and runs

No dependencies with known security vulnerabilities.

circleci/v2upgrade

6 years, 5 months ago

287972f8

install dependency fix dependency issue

No dependencies with known security vulnerabilities.

circleci/v2upgrade

6 years, 5 months ago

4ee6b10c

convert to v2 for now per https://circleci.com/docs/2.0/migrating-from-1-2/ skipping production an

No dependencies with known security vulnerabilities.

pyup-update-astroid-1.6.4-to-2.2.5

6 years, 5 months ago

ae76e32f

fix travis build no 2.2.5 in requirement request

No dependencies with known security vulnerabilities.

pyup-update-astroid-1.6.4-to-2.2.5

6 years, 5 months ago

114d5e52

Merge branch 'master' into pyup-update-astroid-1.6.4-to-2.2.5

No dependencies with known security vulnerabilities.

master

6 years, 5 months ago

49dac626

Merge pull request #52 from kenneyhe/pyup-update-click-6.7-to-7.0 Update click to 7.0

No dependencies with known security vulnerabilities.

master

6 years, 5 months ago

a46a18bf

Merge pull request #100 from kenneyhe/pyup-update-requests-2.18.4-to-2.22.0 Update requests to 2.22

No dependencies with known security vulnerabilities.

pyup-update-lazy-object-proxy-1.3.1-to-1.4.2

6 years, 5 months ago

456d18f8

Update lazy-object-proxy from 1.3.1 to 1.4.2

requests 2.18.4 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.18.4	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.18.4	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.18.4	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.18.4	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

pyup-update-packaging-16.8-to-19.1

6 years, 5 months ago

3ec28d8c

Update packaging from 16.8 to 19.1

requests 2.18.4 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.18.4	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.18.4	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.18.4	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.18.4	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.