Safety CI > mzollin/qr-pirate

pyup-update-certifi-2023.7.22-to-2023.11.17

2 years, 3 months ago

7043406f

Update certifi from 2023.7.22 to 2023.11.17

No dependencies with known security vulnerabilities.

pyup-update-urllib3-2.0.7-to-2.1.0

2 years, 3 months ago

9638c14a

Update urllib3 from 2.0.7 to 2.1.0

No dependencies with known security vulnerabilities.

master

2 years, 3 months ago

d9973560

Merge pull request #245 from mzollin/pyup-update-urllib3-2.0.6-to-2.0.7 Update urllib3 to 2.0.7

No dependencies with known security vulnerabilities.

pyup-update-urllib3-2.0.6-to-2.0.7

2 years, 4 months ago

af68e20b

Update urllib3 from 2.0.6 to 2.0.7

No dependencies with known security vulnerabilities.

dependabot/pip/urllib3-2.0.7

2 years, 4 months ago

2bf01456

Bump urllib3 from 2.0.6 to 2.0.7 Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.0.6 to

No dependencies with known security vulnerabilities.

master

2 years, 4 months ago

9ea30c3b

Merge pull request #243 from mzollin/pyup-update-pillow-10.0.1-to-10.1.0 Update pillow to 10.1.0

No dependencies with known security vulnerabilities.

pyup-update-pillow-10.0.1-to-10.1.0

2 years, 4 months ago

eb9bef44

Update pillow from 10.0.1 to 10.1.0

No dependencies with known security vulnerabilities.

master

2 years, 4 months ago

67995a66

Merge pull request #242 from mzollin/dependabot/pip/urllib3-2.0.6 Bump urllib3 from 2.0.3 to 2.0.6

No dependencies with known security vulnerabilities.

master

2 years, 4 months ago

c41098e8

Merge pull request #241 from mzollin/pyup-update-urllib3-2.0.3-to-2.0.6 Update urllib3 to 2.0.6

No dependencies with known security vulnerabilities.

pyup-update-urllib3-2.0.3-to-2.0.6

2 years, 4 months ago

8b90ee29

Merge branch 'master' into pyup-update-urllib3-2.0.3-to-2.0.6

No dependencies with known security vulnerabilities.

dependabot/pip/urllib3-2.0.6

2 years, 4 months ago

f5e14303

Bump urllib3 from 2.0.3 to 2.0.6 Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.0.3 to

No dependencies with known security vulnerabilities.

master

2 years, 4 months ago

13699a19

Merge pull request #239 from mzollin/pyup-update-pillow-10.0.0-to-10.0.1 Update pillow to 10.0.1

No dependencies with known security vulnerabilities.

master

2 years, 4 months ago

b5384c80

Merge pull request #238 from mzollin/pyup-update-soupsieve-2.4.1-to-2.5 Update soupsieve to 2.5

Pillow 10.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.0.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	10.0.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	10.0.0	>=2.5.0,<10.0.1	show Pillow 10.0.1 updates its C dependency 'libwebp' to 1.3.2 to include a fix for a high-risk vulnerability. https://pillow.readthedocs.io/en/stable/releasenotes/10.0.1.html
Pillow	10.0.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

master

2 years, 4 months ago

0b8fda34

Merge pull request #237 from mzollin/pyup-update-chardet-5.1.0-to-5.2.0 Update chardet to 5.2.0

Pillow 10.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.0.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	10.0.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	10.0.0	>=2.5.0,<10.0.1	show Pillow 10.0.1 updates its C dependency 'libwebp' to 1.3.2 to include a fix for a high-risk vulnerability. https://pillow.readthedocs.io/en/stable/releasenotes/10.0.1.html
Pillow	10.0.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

pyup-update-chardet-5.1.0-to-5.2.0

2 years, 4 months ago

f57ab087

Merge branch 'master' into pyup-update-chardet-5.1.0-to-5.2.0

Pillow 10.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.0.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	10.0.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	10.0.0	>=2.5.0,<10.0.1	show Pillow 10.0.1 updates its C dependency 'libwebp' to 1.3.2 to include a fix for a high-risk vulnerability. https://pillow.readthedocs.io/en/stable/releasenotes/10.0.1.html
Pillow	10.0.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.