Safety CI > mytardis/mydata-python

pyup-update-inflect-5.3.0-to-6.0.4

2 years, 3 months ago

821cdfdf

Update inflect from 5.3.0 to 6.0.4

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-pre-commit-2.13.0-to-3.2.2

2 years, 3 months ago

04d19c1b

Update pre-commit from 2.13.0 to 3.2.2

pylint 2.8.3 and paramiko 2.7.2 have known security vulnerabilities.

Package

Installed

Affected

Info

pylint

2.8.3

<2.13.0

show

Pylint 2.13.0 fixes a crash when using the doc_params extension.
https://github.com/PyCQA/pylint/issues/5322

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-pylint-2.8.3-to-2.17.2

2 years, 3 months ago

d84a4676

Update pylint from 2.8.3 to 2.17.2

paramiko 2.7.2 has known security vulnerabilities.

Package	Installed	Affected	Info
paramiko	2.7.2	<3.4.0	show Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository. https://github.com/advisories/GHSA-45x7-px36-x8w8
paramiko	2.7.2	>=0,<2.9.3 , >=2.10.0,<2.10.1	show In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Package

Installed

Affected

Info

paramiko

2.7.2

<3.4.0

show

Paramiko 3.4.0 has been released to fix vulnerabilities affecting encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305. The fix requires cooperation from both ends of the connection, making it effective when the remote end is OpenSSH >= 9.6 and configured to use the new “strict kex” mode. For further details, refer to the official Paramiko documentation or GitHub repository.
https://github.com/advisories/GHSA-45x7-px36-x8w8

paramiko

2.7.2

>=0,<2.9.3 , >=2.10.0,<2.10.1

show

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

pyup-update-pywin32-301-to-306

2 years, 3 months ago

4c016cbe

Update pywin32 from 301 to 306

pylint 2.8.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup-update-pre-commit-2.13.0-to-3.2.1

2 years, 3 months ago

c1a312ed

Update pre-commit from 2.13.0 to 3.2.1

pylint 2.8.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup-update-pylint-2.8.3-to-2.17.1

2 years, 3 months ago

3c6ff4cd

Update pylint from 2.8.3 to 2.17.1

No dependencies with known security vulnerabilities.

pyup-update-pytest-asyncio-0.15.1-to-0.21.0

2 years, 3 months ago

22a072c2

Update pytest-asyncio from 0.15.1 to 0.21.0

pylint 2.8.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup-update-pre-commit-2.13.0-to-3.2.0

2 years, 3 months ago

8301e615

Update pre-commit from 2.13.0 to 3.2.0

pylint 2.8.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup-update-coverage-5.5-to-7.2.2

2 years, 3 months ago

60b27e5e

Update coverage from 5.5 to 7.2.2

pylint 2.8.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup-update-paramiko-2.7.2-to-3.1.0

2 years, 3 months ago

a86d7731

Update paramiko from 2.7.2 to 3.1.0

pylint 2.8.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup-update-pylint-2.8.3-to-2.17.0

2 years, 4 months ago

8da75ac2

Update pylint from 2.8.3 to 2.17.0

No dependencies with known security vulnerabilities.

pyup-update-pylint-2.8.3-to-2.16.4

2 years, 4 months ago

3ee89d1f

Update pylint from 2.8.3 to 2.16.4

No dependencies with known security vulnerabilities.

pyup-update-tqdm-4.61.2-to-4.65.0

2 years, 4 months ago

3ba7c8e3

Update tqdm from 4.61.2 to 4.65.0

pylint 2.8.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup-update-pytest-6.2.4-to-7.2.2

2 years, 4 months ago

76a37cba

Update pytest from 6.2.4 to 7.2.2

pylint 2.8.3 has known security vulnerabilities.

Package	Installed	Affected	Info
pylint	2.8.3	<2.13.0	show Pylint 2.13.0 fixes a crash when using the doc_params extension. https://github.com/PyCQA/pylint/issues/5322

pyup-update-pylint-2.8.3-to-2.16.3

2 years, 4 months ago

5d59a597

Update pylint from 2.8.3 to 2.16.3

No dependencies with known security vulnerabilities.