Safety CI > laowantong/paroxython

pyup-update-pytest-7.1.3-to-7.2.0

3 years, 5 months ago

45d6d6ca

Update pytest from 7.1.3 to 7.2.0

No dependencies with known security vulnerabilities.

pyup-update-typing-extensions-4.3.0-to-4.4.0

3 years, 5 months ago

92252125

Update typing-extensions from 4.3.0 to 4.4.0

No dependencies with known security vulnerabilities.

pyup-update-sqlparse-0.4.2-to-0.4.3

3 years, 6 months ago

83af611e

Update sqlparse from 0.4.2 to 0.4.3

No dependencies with known security vulnerabilities.

pyup-update-regex-2022.8.17-to-2022.9.13

3 years, 6 months ago

df74b97f

Update regex from 2022.8.17 to 2022.9.13

No dependencies with known security vulnerabilities.

pyup-update-regex-2022.8.17-to-2022.9.11

3 years, 6 months ago

b1c42c91

Update regex from 2022.8.17 to 2022.9.11

No dependencies with known security vulnerabilities.

master

3 years, 6 months ago

5e1d49e4

migrate from Travis CI to Github actions Workflow converted with https://akx.github.io/travis-to-gi

No dependencies with known security vulnerabilities.

master

3 years, 6 months ago

a575d53a

migrate from Travis CI to Github actions Workflow converted with https://akx.github.io/travis-to-gi

No dependencies with known security vulnerabilities.

master

3 years, 6 months ago

7b958466

migrate from Travis CI to Github actions

No dependencies with known security vulnerabilities.

master

3 years, 6 months ago

44441347

add Python 3.10 partial support "Partial" means that no tag is currently provided for Python 3.10 a

No dependencies with known security vulnerabilities.

master

3 years, 6 months ago

8a8e88d9

regenerate documentation

No dependencies with known security vulnerabilities.

master

3 years, 6 months ago

3a662e55

add Python 3.10 partial support "Partial" means that no tag is currently provided for Python 3.10 a

No dependencies with known security vulnerabilities.

master

3 years, 6 months ago

3f3e137e

drop Python 3.6 and 3.7 support

No dependencies with known security vulnerabilities.

master

3 years, 6 months ago

7af96801

close #123 #122 #119 #116 #97, bump version number

No dependencies with known security vulnerabilities.

pyup-update-pytest-6.1.1-to-7.1.3

3 years, 6 months ago

1e771900

Update pytest from 6.1.1 to 7.1.3

sqlparse 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.4.1	<0.5.4	show Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.
sqlparse	0.4.1	<0.5.4	show Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts. Note: This issue is due to an incomplete fix for CVE-2024-4340.
sqlparse	0.4.1	<0.5.0	show Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.
sqlparse	0.4.1	>=0.4.0,<0.4.2	show Sqlparse version 0.4.2 includes a fix for CVE-2021-32839: In sqlparse versions 0.4.0 and 0.4.1 there is a Regular Expression Denial of Service vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of "\r\n" in SQL comments. Only the formatting feature that removes comments from SQL statements is affected by this regular expression. As a workaround, avoid using the sqlformat.format function with keyword strip_comments=True or the --strip-comments command line flag when using the sqlformat command line tool. https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-p5w8-wqhj-9hhf https://github.com/andialbrecht/sqlparse/commit/8238a9e450ed1524e40cb3a8b0b3c00606903aeb
sqlparse	0.4.1	>=0.1.15,<0.4.4	show Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service). https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2

pyup-update-regex-2020.7.14-to-2022.8.17

3 years, 7 months ago

78b7e132

Update regex from 2020.7.14 to 2022.8.17

sqlparse 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlparse	0.4.1	<0.5.4	show Affected versions of the sqlparse package are vulnerable to Denial of Service (DoS) due to missing hard limits on token grouping recursion depth and token processing when formatting very large SQL tuple lists. During sqlparse.format() processing, the sqlparse.engine.grouping._group_matching() and sqlparse.engine.grouping._group() functions can recurse and iterate over excessively large tlist.tokens without enforcing MAX_GROUPING_DEPTH or MAX_GROUPING_TOKENS, allowing grouping work to grow until it effectively hangs.
sqlparse	0.4.1	<0.5.4	show Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to Algorithmic Complexity. The SQL parser fails to enforce limits when processing deeply nested tuples and large token sequences, leading to excessive resource consumption through crafted SQL statements with extreme nesting depth or token counts. Note: This issue is due to an incomplete fix for CVE-2024-4340.
sqlparse	0.4.1	<0.5.0	show Sqlparse 0.5.0 addresses a potential denial of service (DoS) vulnerability related to recursion errors in deeply nested SQL statements. To mitigate this issue, the update replaces recursion errors with a general SQLParseError, improving the resilience and stability of the parsing process.
sqlparse	0.4.1	>=0.4.0,<0.4.2	show Sqlparse version 0.4.2 includes a fix for CVE-2021-32839: In sqlparse versions 0.4.0 and 0.4.1 there is a Regular Expression Denial of Service vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of "\r\n" in SQL comments. Only the formatting feature that removes comments from SQL statements is affected by this regular expression. As a workaround, avoid using the sqlformat.format function with keyword strip_comments=True or the --strip-comments command line flag when using the sqlformat command line tool. https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-p5w8-wqhj-9hhf https://github.com/andialbrecht/sqlparse/commit/8238a9e450ed1524e40cb3a8b0b3c00606903aeb
sqlparse	0.4.1	>=0.1.15,<0.4.4	show Sqlparse 0.4.4 includes a fix for CVE-2023-30608: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service). https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2