Safety CI > ogpgit/libpythonpro

master

4 years, 6 months ago

0ae3b783

Update pytest from 6.1.2 to 6.2.1

No dependencies with known security vulnerabilities.

master

4 years, 6 months ago

d2766015

Update requests from 2.25.0 to 2.25.1

No dependencies with known security vulnerabilities.

pyup-update-requests-2.25.0-to-2.25.1

4 years, 7 months ago

9d59ce18

Update requests from 2.25.0 to 2.25.1

No dependencies with known security vulnerabilities.

pyup-update-pytest-6.1.2-to-6.2.1

4 years, 7 months ago

0f0b35d1

Update pytest from 6.1.2 to 6.2.1

No dependencies with known security vulnerabilities.

pyup-update-importlib-metadata-3.1.1-to-3.3.0

4 years, 7 months ago

8202efd8

Update importlib-metadata from 3.1.1 to 3.3.0

No dependencies with known security vulnerabilities.

pyup-update-importlib-metadata-3.1.1-to-3.2.0

4 years, 7 months ago

0ebcfe66

Update importlib-metadata from 3.1.1 to 3.2.0

No dependencies with known security vulnerabilities.

pyup-update-pytest-6.1.2-to-6.2.0

4 years, 7 months ago

7ecfc9b9

Update pytest from 6.1.2 to 6.2.0

No dependencies with known security vulnerabilities.

master

4 years, 7 months ago

981f5690

Update requirements-dev.txt

No dependencies with known security vulnerabilities.

master

4 years, 7 months ago

23fa54f7

Update packaging from 20.7 to 20.8

No dependencies with known security vulnerabilities.

master

4 years, 7 months ago

89e34d92

Update py from 1.9.0 to 1.10.0

No dependencies with known security vulnerabilities.

pyup-update-py-1.9.0-to-1.10.0

4 years, 7 months ago

76a96bb1

Update py from 1.9.0 to 1.10.0

No dependencies with known security vulnerabilities.

master

4 years, 7 months ago

3295c062

Update chardet from 3.0.4 to 4.0.0

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-packaging-20.7-to-20.8

4 years, 7 months ago

d2994bc0

Update packaging from 20.7 to 20.8

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-chardet-3.0.4-to-4.0.0

4 years, 7 months ago

0bade8ac

Update chardet from 3.0.4 to 4.0.0

No dependencies with known security vulnerabilities.

master

4 years, 7 months ago

84d5ce22

Update requirements-dev.txt

No dependencies with known security vulnerabilities.