Safety CI > kthy/uml.cs

master

5 years ago

1bc247e3

Merge pull request #117 from kthy/pyup-update-importlib-metadata-3.1.1-to-3.3.0 pyup Update importl

No dependencies with known security vulnerabilities.

pyup-update-importlib-metadata-3.1.1-to-3.3.0

5 years ago

c835bdef

Update importlib-metadata from 3.1.1 to 3.3.0

No dependencies with known security vulnerabilities.

pyup-update-importlib-metadata-3.1.1-to-3.2.0

5 years ago

47878f2f

Update importlib-metadata from 3.1.1 to 3.2.0

No dependencies with known security vulnerabilities.

pyup-update-bandit-1.6.3-to-1.7.0

5 years ago

290100aa

Update bandit from 1.6.3 to 1.7.0

No dependencies with known security vulnerabilities.

master

5 years ago

857a447d

Merge pull request #112 from kthy/pyup-update-packaging-20.7-to-20.8 pyup Update packaging to 20.8

No dependencies with known security vulnerabilities.

master

5 years ago

7d6a93bb

Merge pull request #114 from kthy/pyup-update-pytest-6.1.2-to-6.2.0 pyup Update pytest to 6.2.0

No dependencies with known security vulnerabilities.

pyup-update-pytest-6.1.2-to-6.2.0

5 years ago

85200a2c

Update pytest from 6.1.2 to 6.2.0

No dependencies with known security vulnerabilities.

master

5 years ago

4f92eae4

Merge pull request #113 from kthy/pyup-update-py-1.9.0-to-1.10.0 pyup Update py to 1.10.0

No dependencies with known security vulnerabilities.

pyup-update-py-1.9.0-to-1.10.0

5 years ago

3e65f6d1

Update py from 1.9.0 to 1.10.0

No dependencies with known security vulnerabilities.

pyup-update-packaging-20.7-to-20.8

5 years ago

54444cf6

Update packaging from 20.7 to 20.8

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

master

5 years ago

b464db32

Merge pull request #111 from kthy/pyup-update-bandit-1.6.2-to-1.6.3 pyup Update bandit to 1.6.3

No dependencies with known security vulnerabilities.

pyup-update-bandit-1.6.2-to-1.6.3

5 years ago

20a9c82a

Update bandit from 1.6.2 to 1.6.3

No dependencies with known security vulnerabilities.

master

5 years ago

2152398c

Merge pull request #110 from kthy/pyup-update-importlib-metadata-3.1.0-to-3.1.1 pyup Update importl

No dependencies with known security vulnerabilities.

pyup-update-importlib-metadata-3.1.0-to-3.1.1

5 years ago

8c82df1e

Update importlib-metadata from 3.1.0 to 3.1.1

No dependencies with known security vulnerabilities.

master

5 years ago

9ac6e983

Merge pull request #109 from kthy/pyup-update-stevedore-3.2.2-to-3.3.0 pyup Update stevedore to 3.3

No dependencies with known security vulnerabilities.