Safety CI > paulobueno/libpythonpro

master

6 years, 10 months ago

7c022b92

Merge pull request #54 from paulobueno/pyup-update-urllib3-1.23-to-1.24.1 Update urllib3 to 1.24.1

No dependencies with known security vulnerabilities.

pyup-update-urllib3-1.23-to-1.24.1

6 years, 10 months ago

228492cd

Update urllib3 from 1.23 to 1.24.1

No dependencies with known security vulnerabilities.

pyup-update-pytest-3.5.1-to-4.0.0

6 years, 10 months ago

801a9269

Update pytest from 3.5.1 to 4.0.0

No dependencies with known security vulnerabilities.

pyup-update-more-itertools-4.2.0-to-4.3.0

6 years, 10 months ago

7259b568

Update more-itertools from 4.2.0 to 4.3.0

No dependencies with known security vulnerabilities.

pyup-update-pyflakes-1.6.0-to-2.0.0

6 years, 10 months ago

bb48f720

Update pyflakes from 1.6.0 to 2.0.0

No dependencies with known security vulnerabilities.

pyup-update-pycodestyle-2.3.1-to-2.4.0

6 years, 10 months ago

2f67c3f7

Update pycodestyle from 2.3.1 to 2.4.0

No dependencies with known security vulnerabilities.

pyup-update-flake8-3.5.0-to-3.6.0

6 years, 10 months ago

db0c6a66

Update flake8 from 3.5.0 to 3.6.0

No dependencies with known security vulnerabilities.

master

6 years, 10 months ago

859784fb

Merge pull request #35 from paulobueno/pyup-update-py-1.5.4-to-1.7.0 Update py to 1.7.0

No dependencies with known security vulnerabilities.

master

6 years, 10 months ago

d3e26331

Merge pull request #37 from paulobueno/pyup-update-pluggy-0.6.0-to-0.8.0 Update pluggy to 0.8.0

No dependencies with known security vulnerabilities.

master

6 years, 10 months ago

e8953368

Merge pull request #36 from paulobueno/pyup-update-certifi-2018.4.16-to-2018.10.15 Update certifi t

No dependencies with known security vulnerabilities.

master

6 years, 10 months ago

1af2a866

Merge pull request #46 from paulobueno/pyup-update-requests-2.19.1-to-2.20.1 Update requests to 2.2

No dependencies with known security vulnerabilities.

pyup-update-pytest-3.5.1-to-4.0.0

6 years, 10 months ago

1141f6ed

Update pytest from 3.5.1 to 4.0.0

requests 2.19.1 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.19.1	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.19.1	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.19.1	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.19.1	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

pyup-update-pytest-3.5.1-to-3.10.1

6 years, 10 months ago

025ed3f6

Update pytest from 3.5.1 to 3.10.1

requests 2.19.1 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.19.1	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.19.1	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.19.1	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.19.1	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

pyup-update-requests-2.19.1-to-2.20.1

6 years, 10 months ago

a062bbf6

Update requests from 2.19.1 to 2.20.1

No dependencies with known security vulnerabilities.

pyup-update-pytest-3.5.1-to-3.10.0

6 years, 10 months ago

9dc4a6af

Update pytest from 3.5.1 to 3.10.0

requests 2.19.1 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.19.1	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.19.1	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.19.1	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.19.1	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.