Safety CI > metakermit/generator-django-rest

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

f5735bb7

Update pyyaml from 3.13 to 5.1.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

e88a4ddb

Update pyflakes from 2.0.0 to 2.1.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

481685e3

Update pycodestyle from 2.4.0 to 2.5.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

343061ef

Update flake8 from 3.5.0 to 3.7.8

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

d6b6823d

Update coverage from 4.5.1 to 4.5.4

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

7618710c

Update whitenoise from 4.1 to 4.1.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

36e42d0e

Update vine from 1.1.4 to 1.3.0

whitenoise 4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
whitenoise	4.1	<4.1.3	show Whitenoise 4.1.3 fixes potential path traversal attack while running in autorefresh mode on Windows. https://github.com/evansd/whitenoise/commit/4d8a3ab1e97d7ddb18b3fa8b4909c92bad5529c6

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

0b3e9933

Update urllib3 from 1.23 to 1.25.3

whitenoise 4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
whitenoise	4.1	<4.1.3	show Whitenoise 4.1.3 fixes potential path traversal attack while running in autorefresh mode on Windows. https://github.com/evansd/whitenoise/commit/4d8a3ab1e97d7ddb18b3fa8b4909c92bad5529c6

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

45906e40

Update typing from 3.6.6 to 3.7.4.1

whitenoise 4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
whitenoise	4.1	<4.1.3	show Whitenoise 4.1.3 fixes potential path traversal attack while running in autorefresh mode on Windows. https://github.com/evansd/whitenoise/commit/4d8a3ab1e97d7ddb18b3fa8b4909c92bad5529c6

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

bc77df6c

Update sqlparse from 0.2.4 to 0.3.0

whitenoise 4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
whitenoise	4.1	<4.1.3	show Whitenoise 4.1.3 fixes potential path traversal attack while running in autorefresh mode on Windows. https://github.com/evansd/whitenoise/commit/4d8a3ab1e97d7ddb18b3fa8b4909c92bad5529c6

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

84c4b180

Update six from 1.11.0 to 1.12.0

whitenoise 4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
whitenoise	4.1	<4.1.3	show Whitenoise 4.1.3 fixes potential path traversal attack while running in autorefresh mode on Windows. https://github.com/evansd/whitenoise/commit/4d8a3ab1e97d7ddb18b3fa8b4909c92bad5529c6

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

7b74bf49

Update rx from 1.6.1 to 3.0.1

whitenoise 4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
whitenoise	4.1	<4.1.3	show Whitenoise 4.1.3 fixes potential path traversal attack while running in autorefresh mode on Windows. https://github.com/evansd/whitenoise/commit/4d8a3ab1e97d7ddb18b3fa8b4909c92bad5529c6

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

22d12168

Update requests from 2.19.1 to 2.22.0

whitenoise 4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
whitenoise	4.1	<4.1.3	show Whitenoise 4.1.3 fixes potential path traversal attack while running in autorefresh mode on Windows. https://github.com/evansd/whitenoise/commit/4d8a3ab1e97d7ddb18b3fa8b4909c92bad5529c6

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

91a9add3

Update redis from 2.10.6 to 3.3.8

requests 2.19.1 and whitenoise 4.1 have known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.19.1	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.
requests	2.19.1	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.19.1	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
whitenoise	4.1	<4.1.3	show Whitenoise 4.1.3 fixes potential path traversal attack while running in autorefresh mode on Windows. https://github.com/evansd/whitenoise/commit/4d8a3ab1e97d7ddb18b3fa8b4909c92bad5529c6

pyup-scheduled-update-2019-09-01

5 years, 8 months ago

095e0b10

Update pytz from 2018.5 to 2019.2

requests 2.19.1 and whitenoise 4.1 have known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.19.1	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.
requests	2.19.1	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.19.1	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
whitenoise	4.1	<4.1.3	show Whitenoise 4.1.3 fixes potential path traversal attack while running in autorefresh mode on Windows. https://github.com/evansd/whitenoise/commit/4d8a3ab1e97d7ddb18b3fa8b4909c92bad5529c6