Safety CI > nightingu/damebot

Docs | Support

nightingu/damebot

Requirements Safety CI

dependabot/pip/pytest-7.0.0

3 years, 1 month ago

c76908dc

Bump pytest from 6.2.2 to 7.0.0 Bumps [pytest](https://github.com/pytest-dev/pytest) from 6.2.2 to

py7zr 0.11.3 has known security vulnerabilities.

Package

Installed

Affected

Info

py7zr

0.11.3

<0.17.3

show

Py7zr 0.17.3 protects against directory traversal attacks by checking file paths in ArchiveFile.
https://github.com/miurahr/py7zr/commit/2cb066688b05ee7427f236fd35f5598112e9d501

py7zr

0.11.3

<=0.20.0

show

Py7zr 0.20.1 includes a fix for CVE-2022-44900: A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file.

py7zr

0.11.3

<0.20.1

show

Py7zr 0.20.1 adds protection against path traversal attacks.
https://github.com/miurahr/py7zr/commit/1bb43f17515c7f69673a1c88ab9cc72a7bbef406

dependabot/pip/pypinyin-0.45.0

3 years, 1 month ago

3738492b

Bump pypinyin from 0.40.0 to 0.45.0 Bumps [pypinyin](https://github.com/mozillazg/python-pinyin) fr

No dependencies with known security vulnerabilities.

dependabot/pip/py7zr-0.17.3

3 years, 1 month ago

a360bcc1

Bump py7zr from 0.11.3 to 0.17.3 Bumps [py7zr](https://github.com/miurahr/py7zr) from 0.11.3 to 0.1

No dependencies with known security vulnerabilities.

dependabot/pip/nonebot-adapter-cqhttp-2.0.0b1

3 years, 2 months ago

4a829482

Bump nonebot-adapter-cqhttp from 2.0.0a15 to 2.0.0b1 Bumps [nonebot-adapter-cqhttp](https://github.

No dependencies with known security vulnerabilities.

dependabot/pip/nonebot2-2.0.0b1

3 years, 2 months ago

b176e140

Bump nonebot2 from 2.0.0a15 to 2.0.0b1 Bumps [nonebot2](https://github.com/nonebot/nonebot2) from 2

No dependencies with known security vulnerabilities.

dependabot/pip/decorator-5.1.1

3 years, 2 months ago

ea85cac0

Bump decorator from 4.4.2 to 5.1.1 Bumps [decorator](https://github.com/micheles/decorator) from 4.

No dependencies with known security vulnerabilities.

dependabot/pip/requests-2.27.1

3 years, 2 months ago

436f22e9

Bump requests from 2.25.1 to 2.27.1 Bumps [requests](https://github.com/psf/requests) from 2.25.1 t

No dependencies with known security vulnerabilities.

dependabot/pip/requests-2.27.0

3 years, 2 months ago

73c81dde

Bump requests from 2.25.1 to 2.27.0 Bumps [requests](https://github.com/psf/requests) from 2.25.1 t

No dependencies with known security vulnerabilities.

main

3 years, 2 months ago

2ffd132b

Update README.md

No dependencies with known security vulnerabilities.

main

3 years, 2 months ago

7222aa21

add deploy options 同

No dependencies with known security vulnerabilities.

dependabot/pip/py7zr-0.17.2

3 years, 2 months ago

a850a93b

Bump py7zr from 0.11.3 to 0.17.2 Bumps [py7zr](https://github.com/miurahr/py7zr) from 0.11.3 to 0.1

No dependencies with known security vulnerabilities.

dependabot/pip/py7zr-0.17.0

3 years, 3 months ago

aad859ea

Bump py7zr from 0.11.3 to 0.17.0 Bumps [py7zr](https://github.com/miurahr/py7zr) from 0.11.3 to 0.1

No dependencies with known security vulnerabilities.

dependabot/pip/py7zr-0.16.4

3 years, 3 months ago

4f419f18

Bump py7zr from 0.11.3 to 0.16.4 Bumps [py7zr](https://github.com/miurahr/py7zr) from 0.11.3 to 0.1

No dependencies with known security vulnerabilities.

dependabot/pip/pypinyin-0.44.0

3 years, 3 months ago

8bf3b080

Bump pypinyin from 0.40.0 to 0.44.0 Bumps [pypinyin](https://github.com/mozillazg/python-pinyin) fr

No dependencies with known security vulnerabilities.

dependabot/pip/py7zr-0.16.3

3 years, 3 months ago

87c7bbf5

Bump py7zr from 0.11.3 to 0.16.3 Bumps [py7zr](https://github.com/miurahr/py7zr) from 0.11.3 to 0.1

No dependencies with known security vulnerabilities.

older