Safety CI > mzollin/qr-pirate

pyup-update-chardet-7.4.2-to-7.4.3

3 months ago

d9c0439d

Update chardet from 7.4.2 to 7.4.3

No dependencies with known security vulnerabilities.

master

3 months ago

642f9c49

Merge pull request #351 from mzollin/pyup-update-chardet-7.4.1-to-7.4.2 Update chardet to 7.4.2

No dependencies with known security vulnerabilities.

master

3 months ago

0d9c49b0

Merge pull request #350 from mzollin/pyup-update-lxml-6.0.3-to-6.0.4 Update lxml to 6.0.4

No dependencies with known security vulnerabilities.

pyup-update-chardet-7.4.1-to-7.4.2

3 months ago

c301e798

Update chardet from 7.4.1 to 7.4.2

No dependencies with known security vulnerabilities.

pyup-update-lxml-6.0.3-to-6.0.4

3 months ago

a5d782fa

Update lxml from 6.0.3 to 6.0.4

No dependencies with known security vulnerabilities.

master

3 months, 1 week ago

2719d7e4

Merge pull request #349 from mzollin/pyup-update-lxml-6.0.2-to-6.0.3 Update lxml to 6.0.3

No dependencies with known security vulnerabilities.

master

3 months, 1 week ago

5957d115

Merge pull request #348 from mzollin/pyup-update-chardet-7.4.0.post2-to-7.4.1 Update chardet to 7.4

No dependencies with known security vulnerabilities.

master

3 months, 1 week ago

7ca17c94

Merge pull request #347 from mzollin/pyup-update-pycoin-0.92.20241201-to-0.92718.20260405 Update py

No dependencies with known security vulnerabilities.

pyup-update-lxml-6.0.2-to-6.0.3

3 months, 1 week ago

a7aee00e

Update lxml from 6.0.2 to 6.0.3

No dependencies with known security vulnerabilities.

pyup-update-chardet-7.4.0.post2-to-7.4.1

3 months, 1 week ago

4fa52f5d

Update chardet from 7.4.0.post2 to 7.4.1

No dependencies with known security vulnerabilities.

pyup-update-pycoin-0.92.20241201-to-0.92718.20260405

3 months, 1 week ago

cba1a8c4

Update pycoin from 0.92.20241201 to 0.92718.20260405

No dependencies with known security vulnerabilities.

master

3 months, 2 weeks ago

8863087e

Merge pull request #346 from mzollin/pyup-update-pillow-12.1.1-to-12.2.0 Update pillow to 12.2.0

No dependencies with known security vulnerabilities.

master

3 months, 2 weeks ago

22b07055

Merge pull request #344 from mzollin/pyup-update-chardet-7.2.0-to-7.4.0.post2 Update chardet to 7.4

No dependencies with known security vulnerabilities.

master

3 months, 2 weeks ago

eb5b7342

Merge pull request #345 from mzollin/pyup-update-requests-2.32.5-to-2.33.1 Update requests to 2.33.

No dependencies with known security vulnerabilities.

pyup-update-pillow-12.1.1-to-12.2.0

3 months, 2 weeks ago

a485a9af

Update pillow from 12.1.1 to 12.2.0

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.