Safety CI > mgeiger/gotime

master

3 years, 2 months ago

9b5e22da

Create CODE_OF_CONDUCT.md (#487)

No dependencies with known security vulnerabilities.

add-code-of-conduct-1

3 years, 2 months ago

e5cfa5e1

Create CODE_OF_CONDUCT.md

No dependencies with known security vulnerabilities.

master

3 years, 2 months ago

b931b852

Update watchdog from 2.1.9 to 2.2.0 (#486)

No dependencies with known security vulnerabilities.

master

3 years, 2 months ago

0d776d8b

Update pytest from 7.1.3 to 7.2.0 (#485)

No dependencies with known security vulnerabilities.

pyup-update-watchdog-2.1.9-to-2.2.0

3 years, 2 months ago

58566392

Update watchdog from 2.1.9 to 2.2.0

No dependencies with known security vulnerabilities.

pyup-update-pytest-7.1.3-to-7.2.0

3 years, 2 months ago

4da8cf72

Update pytest from 7.1.3 to 7.2.0

No dependencies with known security vulnerabilities.

master

3 years, 2 months ago

005a7a00

Update tox from 4.0.6 to 4.0.8 (#484)

No dependencies with known security vulnerabilities.

master

3 years, 2 months ago

837facb4

Add mypy to CI (#422) * Add mypy to CI * Add workflow with py3.10 and py3.11 * Clean up tox error

No dependencies with known security vulnerabilities.

pyup-update-tox-4.0.6-to-4.0.8

3 years, 2 months ago

10ed6fc7

Update tox from 4.0.6 to 4.0.8

No dependencies with known security vulnerabilities.

GO-1-move-ci-from-travis-ci-to-git-hub-actions

3 years, 2 months ago

b1cbc721

Clean up tox errors

wheel 0.37.1 has known security vulnerabilities.

Package	Installed	Affected	Info
wheel	0.37.1	<0.46.2	show Affected versions of the wheel package are vulnerable to Path Traversal due to applying extracted file permissions using an unsanitized archive pathname. The vulnerable logic is in wheel.cli.unpack.unpack (and setuptools._vendor.wheel.cli.unpack.unpack), where the code calls wf.extract(zinfo, destination) but then performs destination.joinpath(zinfo.filename).chmod(permissions) using zinfo.filename directly, allowing dot-dot-slash sequences to escape the intended directory.
wheel	0.37.1	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

wheel

0.37.1

<0.46.2

show

Affected versions of the wheel package are vulnerable to Path Traversal due to applying extracted file permissions using an unsanitized archive pathname. The vulnerable logic is in wheel.cli.unpack.unpack (and setuptools._vendor.wheel.cli.unpack.unpack), where the code calls wf.extract(zinfo, destination) but then performs destination.joinpath(zinfo.filename).chmod(permissions) using zinfo.filename directly, allowing dot-dot-slash sequences to escape the intended directory.

wheel

0.37.1

<0.38.1

show

Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

master

3 years, 2 months ago

da8b71d4

Update pylint from 2.15.7 to 2.15.8 (#483)

No dependencies with known security vulnerabilities.

master

3 years, 2 months ago

55e26ad7

Update tox from 3.25.1 to 4.0.6 (#482) Co-authored-by: Matthew J. Geiger <mgeiger@users.noreply.git

No dependencies with known security vulnerabilities.

master

3 years, 2 months ago

48594979

Update twine from 4.0.1 to 4.0.2 (#477)

No dependencies with known security vulnerabilities.

pyup-update-pylint-2.15.7-to-2.15.8

3 years, 2 months ago

b6b68b10

Update pylint from 2.15.7 to 2.15.8

No dependencies with known security vulnerabilities.

master

3 years, 2 months ago

882cc5c0

Update pylint from 2.15.0 to 2.15.7 (#476) Co-authored-by: Matthew J. Geiger <mgeiger@users.noreply

No dependencies with known security vulnerabilities.