Safety CI > mzollin/qr-pirate

pyup-update-beautifulsoup4-4.11.1-to-4.12.1

2 years ago

994d71f9

Update beautifulsoup4 from 4.11.1 to 4.12.1

No dependencies with known security vulnerabilities.

pyup-update-pillow-9.4.0-to-9.5.0

2 years ago

571f4677

Update pillow from 9.4.0 to 9.5.0

No dependencies with known security vulnerabilities.

pyup-update-pycoin-0.92.20220529-to-0.92.20230326

2 years ago

ce53472e

Update pycoin from 0.92.20220529 to 0.92.20230326

No dependencies with known security vulnerabilities.

pyup-update-beautifulsoup4-4.11.1-to-4.12.0

2 years, 1 month ago

77abef53

Update beautifulsoup4 from 4.11.1 to 4.12.0

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.26.13-to-1.26.15

2 years, 1 month ago

f05f7148

Update urllib3 from 1.26.13 to 1.26.15

No dependencies with known security vulnerabilities.

pyup-update-soupsieve-2.3.2.post1-to-2.4

2 years, 2 months ago

dc552ddc

Update soupsieve from 2.3.2.post1 to 2.4

No dependencies with known security vulnerabilities.

pyup-update-beautifulsoup4-4.11.1-to-4.11.2

2 years, 2 months ago

3d9ab099

Update beautifulsoup4 from 4.11.1 to 4.11.2

No dependencies with known security vulnerabilities.

pyup-update-requests-2.28.1-to-2.28.2

2 years, 3 months ago

5d1428d4

Update requests from 2.28.1 to 2.28.2

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.26.13-to-1.26.14

2 years, 3 months ago

a5e95def

Update urllib3 from 1.26.13 to 1.26.14

No dependencies with known security vulnerabilities.

master

2 years, 3 months ago

02365164

Update lxml from 4.9.1 to 4.9.2

No dependencies with known security vulnerabilities.

master

2 years, 3 months ago

589b352d

Merge pull request #211 from mzollin/pyup-update-chardet-5.0.0-to-5.1.0 Update chardet to 5.1.0

certifi 2022.9.24 has known security vulnerabilities.

Package	Installed	Affected	Info
certifi	2022.9.24	<2022.12.07	show Certifi 2022.12.07 includes a fix for CVE-2022-23491: Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.
certifi	2022.9.24	>=2015.04.28,<2023.07.22	show Certifi 2023.07.22 includes a fix for CVE-2023-37920: Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7
certifi	2022.9.24	>=2021.05.30,<2024.07.04	show Certifi affected versions recognized root certificates from GLOBALTRUST. Certifi patch removes these root certificates from the root store. These certificates are being removed pursuant to an investigation that identified "long-running and unresolved compliance issues" and are also in the process of being removed from Mozilla's trust store.

Package

Installed

Affected

Info

certifi

2022.9.24

<2022.12.07

show

Certifi 2022.12.07 includes a fix for CVE-2022-23491: Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

certifi

2022.9.24

>=2015.04.28,<2023.07.22

show

Certifi 2023.07.22 includes a fix for CVE-2023-37920: Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.
https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7

certifi

2022.9.24

>=2021.05.30,<2024.07.04

show

Certifi affected versions recognized root certificates from GLOBALTRUST. Certifi patch removes these root certificates from the root store. These certificates are being removed pursuant to an investigation that identified "long-running and unresolved compliance issues" and are also in the process of being removed from Mozilla's trust store.

master

2 years, 3 months ago

ecdf5efb

Merge pull request #210 from mzollin/pyup-update-urllib3-1.26.10-to-1.26.13 Update urllib3 to 1.26.

certifi 2022.9.24 has known security vulnerabilities.

Package	Installed	Affected	Info
certifi	2022.9.24	<2022.12.07	show Certifi 2022.12.07 includes a fix for CVE-2022-23491: Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.
certifi	2022.9.24	>=2015.04.28,<2023.07.22	show Certifi 2023.07.22 includes a fix for CVE-2023-37920: Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7
certifi	2022.9.24	>=2021.05.30,<2024.07.04	show Certifi affected versions recognized root certificates from GLOBALTRUST. Certifi patch removes these root certificates from the root store. These certificates are being removed pursuant to an investigation that identified "long-running and unresolved compliance issues" and are also in the process of being removed from Mozilla's trust store.

Package

Installed

Affected

Info

certifi

2022.9.24

<2022.12.07

show

Certifi 2022.12.07 includes a fix for CVE-2022-23491: Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

certifi

2022.9.24

>=2015.04.28,<2023.07.22

show

Certifi 2023.07.22 includes a fix for CVE-2023-37920: Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.
https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7

certifi

2022.9.24

>=2021.05.30,<2024.07.04

show

Certifi affected versions recognized root certificates from GLOBALTRUST. Certifi patch removes these root certificates from the root store. These certificates are being removed pursuant to an investigation that identified "long-running and unresolved compliance issues" and are also in the process of being removed from Mozilla's trust store.

pyup-update-pillow-9.3.0-to-9.4.0

2 years, 3 months ago

3d3b56da

Update pillow from 9.3.0 to 9.4.0

certifi 2022.9.24 has known security vulnerabilities.

Package	Installed	Affected	Info
certifi	2022.9.24	<2022.12.07	show Certifi 2022.12.07 includes a fix for CVE-2022-23491: Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.
certifi	2022.9.24	>=2015.04.28,<2023.07.22	show Certifi 2023.07.22 includes a fix for CVE-2023-37920: Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7
certifi	2022.9.24	>=2021.05.30,<2024.07.04	show Certifi affected versions recognized root certificates from GLOBALTRUST. Certifi patch removes these root certificates from the root store. These certificates are being removed pursuant to an investigation that identified "long-running and unresolved compliance issues" and are also in the process of being removed from Mozilla's trust store.

Package

Installed

Affected

Info

certifi

2022.9.24

<2022.12.07

show

Certifi 2022.12.07 includes a fix for CVE-2022-23491: Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

certifi

2022.9.24

>=2015.04.28,<2023.07.22

show

Certifi 2023.07.22 includes a fix for CVE-2023-37920: Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.
https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7

certifi

2022.9.24

>=2021.05.30,<2024.07.04

show

Certifi affected versions recognized root certificates from GLOBALTRUST. Certifi patch removes these root certificates from the root store. These certificates are being removed pursuant to an investigation that identified "long-running and unresolved compliance issues" and are also in the process of being removed from Mozilla's trust store.

pyup-update-lxml-4.9.1-to-4.9.2

2 years, 4 months ago

478a6902

Update lxml from 4.9.1 to 4.9.2

certifi 2022.9.24 has known security vulnerabilities.

Package	Installed	Affected	Info
certifi	2022.9.24	<2022.12.07	show Certifi 2022.12.07 includes a fix for CVE-2022-23491: Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.
certifi	2022.9.24	>=2015.04.28,<2023.07.22	show Certifi 2023.07.22 includes a fix for CVE-2023-37920: Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7
certifi	2022.9.24	>=2021.05.30,<2024.07.04	show Certifi affected versions recognized root certificates from GLOBALTRUST. Certifi patch removes these root certificates from the root store. These certificates are being removed pursuant to an investigation that identified "long-running and unresolved compliance issues" and are also in the process of being removed from Mozilla's trust store.

Package

Installed

Affected

Info

certifi

2022.9.24

<2022.12.07

show

Certifi 2022.12.07 includes a fix for CVE-2022-23491: Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

certifi

2022.9.24

>=2015.04.28,<2023.07.22

show

Certifi 2023.07.22 includes a fix for CVE-2023-37920: Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.
https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7

certifi

2022.9.24

>=2021.05.30,<2024.07.04

show

Certifi affected versions recognized root certificates from GLOBALTRUST. Certifi patch removes these root certificates from the root store. These certificates are being removed pursuant to an investigation that identified "long-running and unresolved compliance issues" and are also in the process of being removed from Mozilla's trust store.

pyup-update-certifi-2022.9.24-to-2022.12.7

2 years, 4 months ago

63b83151

Update certifi from 2022.9.24 to 2022.12.7

No dependencies with known security vulnerabilities.