Safety CI > rnag/dataclass-wizard

pyup/scheduled-update-2024-07-01

1 year, 4 months ago

f999b0de

Update wheel from 0.37.1 to 0.43.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2024-07-01

1 year, 4 months ago

66527278

Update tox from 3.24.5 to 4.15.1

wheel 0.37.1 has known security vulnerabilities.

Package	Installed	Affected	Info
wheel	0.37.1	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

wheel

0.37.1

<0.38.1

show

Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup/scheduled-update-2024-06-01

1 year, 5 months ago

89aa87bb

Update sphinx-issues from 4.0.0 to 4.1.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2024-06-01

1 year, 5 months ago

0525622c

Update sphinx-issues from 3.0.1 to 4.1.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2024-06-01

1 year, 5 months ago

7b46dd6c

Update wheel from 0.42.0 to 0.43.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2024-06-01

1 year, 5 months ago

3296b997

Update dataclasses-json from 0.5.6 to 0.6.6

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2024-06-01

1 year, 5 months ago

f0ce0805

Update jsons from 1.6.1 to 1.6.3

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2024-06-01

1 year, 5 months ago

a54706f9

Update pytest-cov from 3.0.0 to 5.0.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2024-06-01

1 year, 5 months ago

ba46f69b

Update pytest from 7.0.1 to 8.2.1

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2024-06-01

1 year, 5 months ago

22bdbbfd

Update twine from 3.8.0 to 5.1.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2024-06-01

1 year, 5 months ago

3d9d2174

Update watchdog from 2.1.6 to 4.0.1

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2024-06-01

1 year, 5 months ago

b9789968

Update wheel from 0.37.1 to 0.43.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2024-06-01

1 year, 5 months ago

4767f6de

Update sphinx from 5.3.0 to 7.3.7

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2024-06-01

1 year, 5 months ago

c83010c0

Update tox from 3.24.5 to 4.15.0

wheel 0.37.1 has known security vulnerabilities.

Package	Installed	Affected	Info
wheel	0.37.1	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

wheel

0.37.1

<0.38.1

show

Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

pyup/scheduled-update-2024-05-01

1 year, 6 months ago

8d7a661f

Update sphinx-issues from 4.0.0 to 4.1.0

pip 24.0 has known security vulnerabilities.

Package	Installed	Affected	Info
pip	24.0	<25.2	show Affected versions of the pip package are vulnerable to Arbitrary File Overwrite due to improper validation of symbolic link targets in the fallback tar extraction code. In src/pip/_internal/utils/unpacking.py, the _untar_without_filter routine used when the Python tarfile module lacks PEP 706 (no tarfile.data_filter) extracted symlink members with tar._extract_member without verifying that link destinations resolve under the extraction root, a check later added via the is_symlink_target_in_tar helper.
pip	24.0	<25.0	show Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.

Package

Installed

Affected

Info

pip

24.0

<25.2

show

Affected versions of the pip package are vulnerable to Arbitrary File Overwrite due to improper validation of symbolic link targets in the fallback tar extraction code. In src/pip/_internal/utils/unpacking.py, the _untar_without_filter routine used when the Python tarfile module lacks PEP 706 (no tarfile.data_filter) extracted symlink members with tar._extract_member without verifying that link destinations resolve under the extraction root, a check later added via the is_symlink_target_in_tar helper.

pip

24.0

<25.0

show

Pip solves a security vulnerability that previously allowed maliciously crafted wheel files to execute unauthorized code during installation.