Safety CI > khoivan88/pka

pyup-update-tinydb-4.3.0-to-4.8.2

5 months ago

28c3e73c

Update tinydb from 4.3.0 to 4.8.2

requests 2.25.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.25.0	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.
requests	2.25.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

Package

Installed

Affected

Info

requests

2.25.0

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

requests

2.25.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

pyup-update-tinydb-4.3.0-to-4.8.1

5 months, 1 week ago

54030dae

Update tinydb from 4.3.0 to 4.8.1

requests 2.25.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.25.0	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.
requests	2.25.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

Package

Installed

Affected

Info

requests

2.25.0

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

requests

2.25.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

pyup-update-requests-2.25.0-to-2.32.3

9 months, 2 weeks ago

e20e8c49

Update requests from 2.25.0 to 2.32.3

No dependencies with known security vulnerabilities.

pyup-update-requests-2.25.0-to-2.32.2

9 months, 3 weeks ago

26aa2721

Update requests from 2.25.0 to 2.32.2

No dependencies with known security vulnerabilities.

pyup-update-requests-2.25.0-to-2.32.1

9 months, 3 weeks ago

7010249e

Update requests from 2.25.0 to 2.32.1

No dependencies with known security vulnerabilities.

pyup-update-tinydb-4.3.0-to-4.8.0

1 year, 9 months ago

8ab55c3c

Update tinydb from 4.3.0 to 4.8.0

requests 2.25.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.25.0	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.
requests	2.25.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

Package

Installed

Affected

Info

requests

2.25.0

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

requests

2.25.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

pyup-update-requests-2.25.0-to-2.31.0

1 year, 9 months ago

19674e25

Update requests from 2.25.0 to 2.31.0

No dependencies with known security vulnerabilities.

pyup-update-requests-2.25.0-to-2.30.0

1 year, 10 months ago

230f2135

Update requests from 2.25.0 to 2.30.0

No dependencies with known security vulnerabilities.

pyup-update-requests-2.25.0-to-2.29.0

1 year, 10 months ago

9940f284

Update requests from 2.25.0 to 2.29.0

No dependencies with known security vulnerabilities.

pyup-update-tinydb-4.3.0-to-4.7.1

2 years, 1 month ago

99dcd2c6

Update tinydb from 4.3.0 to 4.7.1

No dependencies with known security vulnerabilities.

pyup-update-requests-2.25.0-to-2.28.2

2 years, 2 months ago

3ad6a018

Update requests from 2.25.0 to 2.28.2

No dependencies with known security vulnerabilities.

pyup-update-requests-2.25.0-to-2.28.1

2 years, 8 months ago

3acf35d4

Update requests from 2.25.0 to 2.28.1

No dependencies with known security vulnerabilities.

pyup-update-requests-2.25.0-to-2.28.0

2 years, 9 months ago

91b0f4b1

Update requests from 2.25.0 to 2.28.0

No dependencies with known security vulnerabilities.

pyup-update-tinydb-4.3.0-to-4.7.0

3 years ago

f3a373c4

Update tinydb from 4.3.0 to 4.7.0

No dependencies with known security vulnerabilities.

pyup-update-tinydb-4.3.0-to-4.6.1

3 years, 1 month ago

bbe52338

Update tinydb from 4.3.0 to 4.6.1

No dependencies with known security vulnerabilities.

khoivan88/pka_lookup