Safety CI > kiwitcms/github-marketplace

dependabot/github_actions/actions/setup-python-5

1 year, 3 months ago

f39c743b

Bump actions/setup-python from 4 to 5 Bumps [actions/setup-python](https://github.com/actions/setup

No dependencies with known security vulnerabilities.

dependabot/github_actions/actions/checkout-4

1 year, 3 months ago

00c82cc4

Bump actions/checkout from 3 to 4 Bumps [actions/checkout](https://github.com/actions/checkout) fro

No dependencies with known security vulnerabilities.

dependabot/github_actions/github/codeql-action-3

1 year, 3 months ago

80797cc0

Bump github/codeql-action from 2 to 3 Bumps [github/codeql-action](https://github.com/github/codeql

No dependencies with known security vulnerabilities.

python3.11

1 year, 3 months ago

0413a726

DEBUG: do not report test results to Kiwi TCMS File "/opt/hostedtoolcache/Python/3.11.7/x64/lib/p

No dependencies with known security vulnerabilities.

python3.11

1 year, 3 months ago

1532e5d6

Build and test with Python 3.11

No dependencies with known security vulnerabilities.

python3.11

1 year, 3 months ago

fe46c707

Build and test with Python 3.11

No dependencies with known security vulnerabilities.

master

1 year, 3 months ago

5ef3a60f

DEBUG: print response

No dependencies with known security vulnerabilities.

improvements

1 year, 3 months ago

cce105c8

DEBUG: print response

No dependencies with known security vulnerabilities.

improvements

1 year, 3 months ago

c6f71854

Update key name for error responses from Quay.io

No dependencies with known security vulnerabilities.

improvements

1 year, 3 months ago

b39d9c11

DEBUG failing test

No dependencies with known security vulnerabilities.

improvements

1 year, 3 months ago

65889b90

Enable black in pre-commit CI

No dependencies with known security vulnerabilities.

improvements

1 year, 3 months ago

6eef3012

Don't fail CI jobs on CodeCov errors b/c such errors happen intermittently and we can't really do a

No dependencies with known security vulnerabilities.

dependabot/pip/requests-2.28.2

1 year, 3 months ago

4e2d914e

Bump requests from 2.28.1 to 2.28.2 Bumps [requests](https://github.com/psf/requests) from 2.28.1 t

requests 2.28.2 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.28.2	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.
requests	2.28.2	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

Package

Installed

Affected

Info

requests

2.28.2

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

requests

2.28.2

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

master

1 year, 5 months ago

f94d9b06

[pre-commit.ci] pre-commit autoupdate updates: - [github.com/pre-commit/pre-commit-hooks: v4.4.0 →

No dependencies with known security vulnerabilities.

pre-commit-ci-update-config

1 year, 5 months ago

a32e500f

[pre-commit.ci] pre-commit autoupdate updates: - [github.com/pre-commit/pre-commit-hooks: v4.4.0 →

No dependencies with known security vulnerabilities.