Safety CI > lapisdecor/bzoinq

master

2 days, 17 hours ago

931b198c

Merge pull request #644 from lapisdecor/pyup-update-wheel-0.42.0-to-0.43.0 Update wheel to 0.43.0

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

pyup-update-pytest-8.0.0-to-8.2.0

6 days, 12 hours ago

5459c25b

Update pytest from 8.0.0 to 8.2.0

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

pyup-update-pytest-8.0.0-to-8.1.2

1 week ago

ad53600b

Update pytest from 8.0.0 to 8.1.2

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

pyup-update-tox-4.12.1-to-4.15.0

1 week ago

481c1dc4

Update tox from 4.12.1 to 4.15.0

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

pyup-update-coverage-7.4.1-to-7.5.0

1 week, 3 days ago

9560a999

Update coverage from 7.4.1 to 7.5.0

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

pyup-update-sphinx-7.2.6-to-7.3.7

2 weeks, 1 day ago

be7d9ec5

Update sphinx from 7.2.6 to 7.3.7

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

pyup-update-sphinx-7.2.6-to-7.3.6

2 weeks, 2 days ago

5ffe1319

Update sphinx from 7.2.6 to 7.3.6

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

pyup-update-sphinx-7.2.6-to-7.3.5

2 weeks, 3 days ago

3cb649a3

Update sphinx from 7.2.6 to 7.3.5

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	>=0	show DISPUTED An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

Package

Installed

Affected

Info

pip

24.0

>=0

show

** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.

pyup-update-tox-4.12.1-to-4.14.2

1 month, 1 week ago

134d19da

Update tox from 4.12.1 to 4.14.2

No dependencies with known security vulnerabilities.

pyup-update-coverage-7.4.1-to-7.4.4

1 month, 2 weeks ago

8ccde4a8

Update coverage from 7.4.1 to 7.4.4

No dependencies with known security vulnerabilities.

pyup-update-wheel-0.42.0-to-0.43.0

1 month, 3 weeks ago

233f7ba9

Update wheel from 0.42.0 to 0.43.0

No dependencies with known security vulnerabilities.

pyup-update-pytest-8.0.0-to-8.1.1

1 month, 3 weeks ago

1896c047

Update pytest from 8.0.0 to 8.1.1

No dependencies with known security vulnerabilities.

pyup-update-tox-4.12.1-to-4.14.1

1 month, 4 weeks ago

cf74301c

Update tox from 4.12.1 to 4.14.1

No dependencies with known security vulnerabilities.

pyup-update-tox-4.12.1-to-4.14.0

1 month, 4 weeks ago

70210e0e

Update tox from 4.12.1 to 4.14.0

No dependencies with known security vulnerabilities.

pyup-update-pytest-8.0.0-to-8.1.0

2 months ago

9766f51e

Update pytest from 8.0.0 to 8.1.0

No dependencies with known security vulnerabilities.