Safety CI > r-trevisan/libpythonpro

21

2 years, 3 months ago

1b5fe91a

Inserido teste com pytest close #21

urllib3 1.26.4 has known security vulnerabilities.

Package	Installed	Affected	Info
urllib3	1.26.4	<1.26.17 , >=2.0.0a1,<2.0.5	show Urllib3 1.26.17 and 2.0.5 include a fix for CVE-2023-43804: Urllib3 doesn't treat the 'Cookie' HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a 'Cookie' header and unknowingly leak information via HTTP redirects to a different origin if that user doesn't disable redirects explicitly. https://github.com/urllib3/urllib3/security/advisories/GHSA-v845-jxx5-vc9f
urllib3	1.26.4	<1.26.5	show Urllib3 1.26.5 includes a fix for CVE-2021-33503: When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect. https://github.com/advisories/GHSA-q2q7-5pp4-w6pg
urllib3	1.26.4	<1.26.18 , >=2.0.0a1,<2.0.7	show Urllib3 1.26.18 and 2.0.7 include a fix for CVE-2023-45803: Request body not stripped after redirect from 303 status changes request method to GET. https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4

Package

Installed

Affected

Info

urllib3

1.26.4

<1.26.17 , >=2.0.0a1,<2.0.5

show

Urllib3 1.26.17 and 2.0.5 include a fix for CVE-2023-43804: Urllib3 doesn't treat the 'Cookie' HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a 'Cookie' header and unknowingly leak information via HTTP redirects to a different origin if that user doesn't disable redirects explicitly.
https://github.com/urllib3/urllib3/security/advisories/GHSA-v845-jxx5-vc9f

urllib3

1.26.4

<1.26.5

show

Urllib3 1.26.5 includes a fix for CVE-2021-33503: When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.
https://github.com/advisories/GHSA-q2q7-5pp4-w6pg

urllib3

1.26.4

<1.26.18 , >=2.0.0a1,<2.0.7

show

Urllib3 1.26.18 and 2.0.7 include a fix for CVE-2023-45803: Request body not stripped after redirect from 303 status changes request method to GET.
https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4

21

2 years, 3 months ago

4d67cfc5

Inserido teste com pytest close #21

urllib3 1.26.4 has known security vulnerabilities.

Package	Installed	Affected	Info
urllib3	1.26.4	<1.26.17 , >=2.0.0a1,<2.0.5	show Urllib3 1.26.17 and 2.0.5 include a fix for CVE-2023-43804: Urllib3 doesn't treat the 'Cookie' HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a 'Cookie' header and unknowingly leak information via HTTP redirects to a different origin if that user doesn't disable redirects explicitly. https://github.com/urllib3/urllib3/security/advisories/GHSA-v845-jxx5-vc9f
urllib3	1.26.4	<1.26.5	show Urllib3 1.26.5 includes a fix for CVE-2021-33503: When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect. https://github.com/advisories/GHSA-q2q7-5pp4-w6pg
urllib3	1.26.4	<1.26.18 , >=2.0.0a1,<2.0.7	show Urllib3 1.26.18 and 2.0.7 include a fix for CVE-2023-45803: Request body not stripped after redirect from 303 status changes request method to GET. https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4

Package

Installed

Affected

Info

urllib3

1.26.4

<1.26.17 , >=2.0.0a1,<2.0.5

show

Urllib3 1.26.17 and 2.0.5 include a fix for CVE-2023-43804: Urllib3 doesn't treat the 'Cookie' HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a 'Cookie' header and unknowingly leak information via HTTP redirects to a different origin if that user doesn't disable redirects explicitly.
https://github.com/urllib3/urllib3/security/advisories/GHSA-v845-jxx5-vc9f

urllib3

1.26.4

<1.26.5

show

Urllib3 1.26.5 includes a fix for CVE-2021-33503: When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.
https://github.com/advisories/GHSA-q2q7-5pp4-w6pg

urllib3

1.26.4

<1.26.18 , >=2.0.0a1,<2.0.7

show

Urllib3 1.26.18 and 2.0.7 include a fix for CVE-2023-45803: Request body not stripped after redirect from 303 status changes request method to GET.
https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4

main

2 years, 3 months ago

30f2d0cc

Inserido teste com pytest close #21

urllib3 1.26.4 has known security vulnerabilities.

Package	Installed	Affected	Info
urllib3	1.26.4	<1.26.17 , >=2.0.0a1,<2.0.5	show Urllib3 1.26.17 and 2.0.5 include a fix for CVE-2023-43804: Urllib3 doesn't treat the 'Cookie' HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a 'Cookie' header and unknowingly leak information via HTTP redirects to a different origin if that user doesn't disable redirects explicitly. https://github.com/urllib3/urllib3/security/advisories/GHSA-v845-jxx5-vc9f
urllib3	1.26.4	<1.26.5	show Urllib3 1.26.5 includes a fix for CVE-2021-33503: When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect. https://github.com/advisories/GHSA-q2q7-5pp4-w6pg
urllib3	1.26.4	<1.26.18 , >=2.0.0a1,<2.0.7	show Urllib3 1.26.18 and 2.0.7 include a fix for CVE-2023-45803: Request body not stripped after redirect from 303 status changes request method to GET. https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4

Package

Installed

Affected

Info

urllib3

1.26.4

<1.26.17 , >=2.0.0a1,<2.0.5

show

Urllib3 1.26.17 and 2.0.5 include a fix for CVE-2023-43804: Urllib3 doesn't treat the 'Cookie' HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a 'Cookie' header and unknowingly leak information via HTTP redirects to a different origin if that user doesn't disable redirects explicitly.
https://github.com/urllib3/urllib3/security/advisories/GHSA-v845-jxx5-vc9f

urllib3

1.26.4

<1.26.5

show

Urllib3 1.26.5 includes a fix for CVE-2021-33503: When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.
https://github.com/advisories/GHSA-q2q7-5pp4-w6pg

urllib3

1.26.4

<1.26.18 , >=2.0.0a1,<2.0.7

show

Urllib3 1.26.18 and 2.0.7 include a fix for CVE-2023-45803: Request body not stripped after redirect from 303 status changes request method to GET.
https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4

main

2 years, 11 months ago

72e4ea66

projeto com versao 0.1 enviado ao pypi

No dependencies with known security vulnerabilities.

main

2 years, 11 months ago

7e9d2687

markdowns atualizados

No dependencies with known security vulnerabilities.

main

2 years, 11 months ago

311344cc

Merge pull request #6 from r-trevisan/18 implementado o setup.py

No dependencies with known security vulnerabilities.

18

2 years, 11 months ago

f5ee5515

corrigido espaço em branco no setup.py

No dependencies with known security vulnerabilities.

18

2 years, 11 months ago

8018fa79

implementado o setup.py

No dependencies with known security vulnerabilities.

main

2 years, 11 months ago

2e120fb6

Merge pull request #5 from r-trevisan/18 implementado o setup.py

No dependencies with known security vulnerabilities.

18

2 years, 11 months ago

443c96bc

implementado o setup.py

No dependencies with known security vulnerabilities.

main

2 years, 12 months ago

94a755d5

Merge remote-tracking branch 'origin/main'

No dependencies with known security vulnerabilities.

main

2 years, 12 months ago

b23293e0

Merge pull request #2 from r-trevisan/pyup-config Config file for pyup.io

No dependencies with known security vulnerabilities.

main

2 years, 12 months ago

785e6f4d

reajustado o arquivo pyup.yml

No dependencies with known security vulnerabilities.

main

2 years, 12 months ago

15e5b812

ajustado o arquivo pyup.yml

You are using an invalid .pyup.yml config, unable to check dependencies

main

2 years, 12 months ago

844bdc19

adicionado o arquivo pyup.yml

No dependencies with known security vulnerabilities.