Safety CI > rnag/dataclass-wizard

v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

1 year, 3 months ago

adce2d11

Remove unnecessary code

No dependencies with known security vulnerabilities.

v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

1 year, 3 months ago

0ea60988

This concludes the purge of PY 3.6, 3.7, and 3.8

No dependencies with known security vulnerabilities.

v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

1 year, 3 months ago

517b143f

Continue with purge of PY 3.6, 3.7, and 3.8

No dependencies with known security vulnerabilities.

v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

1 year, 3 months ago

aa99aa8c

Continue with purge of PY 3.6, 3.7, and 3.8

No dependencies with known security vulnerabilities.

v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

1 year, 3 months ago

796efdb4

Continue with purge of PY 3.6, 3.7, and 3.8

No dependencies with known security vulnerabilities.

v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

1 year, 3 months ago

310a0c28

I realized this was a bug!

No dependencies with known security vulnerabilities.

v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

1 year, 3 months ago

59b0845f

Fix `Sphinx` dependency issue

No dependencies with known security vulnerabilities.

v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

1 year, 3 months ago

a3570e92

Starting to purge PY 3.6, 3.7 and 3.8 support

No dependencies with known security vulnerabilities.

v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

1 year, 3 months ago

97526a7a

Update tests to support Python 3.9+ * Run tests on CI for PY 3.9+ * `typing_extensions` should be r

No dependencies with known security vulnerabilities.

v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

1 year, 3 months ago

64590fed

"When you drop py3.6/7/8, remove everything EXCEPT the py.typed file." * See [comment](https://gith

No dependencies with known security vulnerabilities.

v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

1 year, 3 months ago

d267f7fd

Merge remote-tracking branch 'origin/main' into v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

No dependencies with known security vulnerabilities.

main

1 year, 3 months ago

b688833c

Bump version: 0.26.0 → 0.26.1

wheel 0.37.1 has known security vulnerabilities.

Package	Installed	Affected	Info
wheel	0.37.1	<0.46.2	show Affected versions of the wheel package are vulnerable to Path Traversal due to applying extracted file permissions using an unsanitized archive pathname. The vulnerable logic is in wheel.cli.unpack.unpack (and setuptools._vendor.wheel.cli.unpack.unpack), where the code calls wf.extract(zinfo, destination) but then performs destination.joinpath(zinfo.filename).chmod(permissions) using zinfo.filename directly, allowing dot-dot-slash sequences to escape the intended directory.
wheel	0.37.1	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

wheel

0.37.1

<0.46.2

show

Affected versions of the wheel package are vulnerable to Path Traversal due to applying extracted file permissions using an unsanitized archive pathname. The vulnerable logic is in wheel.cli.unpack.unpack (and setuptools._vendor.wheel.cli.unpack.unpack), where the code calls wf.extract(zinfo, destination) but then performs destination.joinpath(zinfo.filename).chmod(permissions) using zinfo.filename directly, allowing dot-dot-slash sequences to escape the intended directory.

wheel

0.37.1

<0.38.1

show

Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

main

1 year, 3 months ago

6a2c38cf

Add `py.typed` marker (#136) Fixes https://github.com/rnag/dataclass-wizard/issues/51 Finalizes ht

wheel 0.37.1 has known security vulnerabilities.

Package	Installed	Affected	Info
wheel	0.37.1	<0.46.2	show Affected versions of the wheel package are vulnerable to Path Traversal due to applying extracted file permissions using an unsanitized archive pathname. The vulnerable logic is in wheel.cli.unpack.unpack (and setuptools._vendor.wheel.cli.unpack.unpack), where the code calls wf.extract(zinfo, destination) but then performs destination.joinpath(zinfo.filename).chmod(permissions) using zinfo.filename directly, allowing dot-dot-slash sequences to escape the intended directory.
wheel	0.37.1	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

wheel

0.37.1

<0.46.2

show

Affected versions of the wheel package are vulnerable to Path Traversal due to applying extracted file permissions using an unsanitized archive pathname. The vulnerable logic is in wheel.cli.unpack.unpack (and setuptools._vendor.wheel.cli.unpack.unpack), where the code calls wf.extract(zinfo, destination) but then performs destination.joinpath(zinfo.filename).chmod(permissions) using zinfo.filename directly, allowing dot-dot-slash sequences to escape the intended directory.

wheel

0.37.1

<0.38.1

show

Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

1 year, 3 months ago

15b98c86

Update all requirements to latest versions * Update requirements in requirements-dev.txt and requir

No dependencies with known security vulnerabilities.

v0.27.0-drop-support-for-PY3.6-3.7-and-3.8

1 year, 3 months ago

13a6dcaf

merge changes from #138 and #134

wheel 0.37.1 has known security vulnerabilities.

Package	Installed	Affected	Info
wheel	0.37.1	<0.46.2	show Affected versions of the wheel package are vulnerable to Path Traversal due to applying extracted file permissions using an unsanitized archive pathname. The vulnerable logic is in wheel.cli.unpack.unpack (and setuptools._vendor.wheel.cli.unpack.unpack), where the code calls wf.extract(zinfo, destination) but then performs destination.joinpath(zinfo.filename).chmod(permissions) using zinfo.filename directly, allowing dot-dot-slash sequences to escape the intended directory.
wheel	0.37.1	<0.38.1	show Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages

Package

Installed

Affected

Info

wheel

0.37.1

<0.46.2

show

Affected versions of the wheel package are vulnerable to Path Traversal due to applying extracted file permissions using an unsanitized archive pathname. The vulnerable logic is in wheel.cli.unpack.unpack (and setuptools._vendor.wheel.cli.unpack.unpack), where the code calls wf.extract(zinfo, destination) but then performs destination.joinpath(zinfo.filename).chmod(permissions) using zinfo.filename directly, allowing dot-dot-slash sequences to escape the intended directory.

wheel

0.37.1

<0.38.1

show

Wheel 0.38.1 includes a fix for CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages