Safety CI > msk-access/uncollapsed_bam

release/1.2.0

3 years, 10 months ago

06767e67

Bump version: 1.1.0 → 1.2.0

No dependencies with known security vulnerabilities.

develop

3 years, 10 months ago

1a66b421

Update for fastp

No dependencies with known security vulnerabilities.

refs/tags/1.1.0

3 years, 10 months ago

c9bcc41e

Merge branch 'release/1.1.0'

No dependencies with known security vulnerabilities.

develop

3 years, 10 months ago

b46f0732

Merge branch 'release/1.1.0' into develop

No dependencies with known security vulnerabilities.

release/1.1.0

3 years, 10 months ago

6626b2ad

Bump version: 0.1.2 → 1.1.0

No dependencies with known security vulnerabilities.

develop

3 years, 10 months ago

f8ce51e9

Merge branch 'feature/update_actions' into develop

No dependencies with known security vulnerabilities.

feature/update_actions

3 years, 10 months ago

d13f8837

Update test_standard_bam_processing.py

No dependencies with known security vulnerabilities.

feature/update_actions

3 years, 10 months ago

2d90786b

Update setup.py

No dependencies with known security vulnerabilities.

feature/update_actions

3 years, 10 months ago

bc47e1bf

Update requirements.txt

No dependencies with known security vulnerabilities.

feature/update_actions

3 years, 10 months ago

2c324907

Update requirements.txt

No dependencies with known security vulnerabilities.

refs/tags/0.1.2

3 years, 10 months ago

06887357

Merge branch 'release/0.1.2'

pip 20.2.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	20.2.3	<21.1	show Pip 21.1 updates its dependency 'urllib3' to v1.26.4 due to security issues.
pip	20.2.3	<21.1	show An issue was discovered in Pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). A warning was added about this behavior in version 21.1. NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.
pip	20.2.3	<21.1	show A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity.
pip	20.2.3	<23.3	show Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.
pip	20.2.3	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

develop

3 years, 10 months ago

6154099c

Merge branch 'release/0.1.2' into develop

pip 20.2.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	20.2.3	<21.1	show Pip 21.1 updates its dependency 'urllib3' to v1.26.4 due to security issues.
pip	20.2.3	<21.1	show An issue was discovered in Pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). A warning was added about this behavior in version 21.1. NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.
pip	20.2.3	<21.1	show A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity.
pip	20.2.3	<23.3	show Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.
pip	20.2.3	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

release/0.1.2

3 years, 10 months ago

dc9d4b52

Modifying versions

pip 20.2.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	20.2.3	<21.1	show Pip 21.1 updates its dependency 'urllib3' to v1.26.4 due to security issues.
pip	20.2.3	<21.1	show An issue was discovered in Pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). A warning was added about this behavior in version 21.1. NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.
pip	20.2.3	<21.1	show A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity.
pip	20.2.3	<23.3	show Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.
pip	20.2.3	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

develop

3 years, 10 months ago

cbb40a4e

PORTING FASP MAX LENGTH OPTION

pip 20.2.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	20.2.3	<21.1	show Pip 21.1 updates its dependency 'urllib3' to v1.26.4 due to security issues.
pip	20.2.3	<21.1	show An issue was discovered in Pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). A warning was added about this behavior in version 21.1. NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely.
pip	20.2.3	<21.1	show A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity.
pip	20.2.3	<23.3	show Affected versions of Pip are vulnerable to Command Injection. When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call (ie "--config"). Controlling the Mercurial configuration can modify how and which repository is installed. This vulnerability does not affect users who aren't installing from Mercurial.
pip	20.2.3	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

dependabot/pip/pip-21.1

3 years, 10 months ago

5d3a6ad2

Bump pip from 20.2.3 to 21.1 Bumps [pip](https://github.com/pypa/pip) from 20.2.3 to 21.1. - [Relea

No dependencies with known security vulnerabilities.

msk-access/uncollapsed_bam_generation