Safety CI > mzollin/qr-pirate

master

1 day, 20 hours ago

8863087e

Merge pull request #346 from mzollin/pyup-update-pillow-12.1.1-to-12.2.0 Update pillow to 12.2.0

No dependencies with known security vulnerabilities.

master

1 day, 20 hours ago

22b07055

Merge pull request #344 from mzollin/pyup-update-chardet-7.2.0-to-7.4.0.post2 Update chardet to 7.4

No dependencies with known security vulnerabilities.

master

1 day, 20 hours ago

eb5b7342

Merge pull request #345 from mzollin/pyup-update-requests-2.32.5-to-2.33.1 Update requests to 2.33.

No dependencies with known security vulnerabilities.

pyup-update-pillow-12.1.1-to-12.2.0

2 days, 19 hours ago

a485a9af

Update pillow from 12.1.1 to 12.2.0

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-requests-2.32.5-to-2.33.1

4 days, 9 hours ago

06e7993e

Update requests from 2.32.5 to 2.33.1

No dependencies with known security vulnerabilities.

pyup-update-chardet-7.2.0-to-7.4.0.post2

5 days, 13 hours ago

975654ff

Update chardet from 7.2.0 to 7.4.0.post2

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-chardet-7.2.0-to-7.4.0.post1

1 week, 1 day ago

703f58fa

Update chardet from 7.2.0 to 7.4.0.post1

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-requests-2.32.5-to-2.33.0

1 week, 2 days ago

9cd104c5

Update requests from 2.32.5 to 2.33.0

No dependencies with known security vulnerabilities.

pyup-update-chardet-7.2.0-to-7.3.0

1 week, 4 days ago

d7abfb86

Update chardet from 7.2.0 to 7.3.0

No dependencies with known security vulnerabilities.

master

1 week, 5 days ago

8837e0da

Merge pull request #340 from mzollin/pyup-update-chardet-7.1.0-to-7.2.0 Update chardet to 7.2.0

No dependencies with known security vulnerabilities.

pyup-update-chardet-7.1.0-to-7.2.0

2 weeks, 3 days ago

105e5d86

Update chardet from 7.1.0 to 7.2.0

No dependencies with known security vulnerabilities.

master

2 weeks, 5 days ago

426097e5

Merge pull request #339 from mzollin/pyup-update-chardet-7.0.1-to-7.1.0 Update chardet to 7.1.0

No dependencies with known security vulnerabilities.

pyup-update-chardet-7.0.1-to-7.1.0

3 weeks, 2 days ago

0bfafce3

Update chardet from 7.0.1 to 7.1.0

No dependencies with known security vulnerabilities.

master

3 weeks, 2 days ago

541ded91

Merge pull request #338 from mzollin/pyup-update-chardet-5.2.0-to-7.0.1 Update chardet to 7.0.1

No dependencies with known security vulnerabilities.

pyup-update-chardet-5.2.0-to-7.0.1

3 weeks, 2 days ago

41417b11

Merge branch 'master' into pyup-update-chardet-5.2.0-to-7.0.1

No dependencies with known security vulnerabilities.