Safety CI > rnag/wystia

pyup/scheduled-update-2026-08-01

1 week, 3 days ago

a597b8d3

Update watchdog from 3.0.0 to 6.0.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2026-08-01

1 week, 3 days ago

ff74432b

Update wheel from 0.40.0 to 0.47.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2026-08-01

1 week, 3 days ago

23078aa3

Update pytest-mock from 3.10.0 to 3.15.1

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2026-08-01

1 week, 3 days ago

18db373e

Update pytest from 7.2.2 to 9.1.1

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2026-08-01

1 week, 3 days ago

b5b2fc5b

Update twine from 4.0.2 to 7.0.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2026-08-01

1 week, 3 days ago

cfde72aa

Update sphinx from 5.3.0 to 9.1.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2026-08-01

1 week, 3 days ago

c1a56b73

Update coverage from 7.2.3 to 7.15.2

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2026-08-01

1 week, 3 days ago

db589c07

Update tox from 4.4.11 to 4.58.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2026-08-01

1 week, 3 days ago

c1ec2c25

Update pylint from 2.17.2 to 4.0.6

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2026-08-01

1 week, 3 days ago

e88080be

Update pip from 23.0.1 to 26.2

wheel 0.40.0 has known security vulnerabilities.

Package	Installed	Affected	Info
wheel	0.40.0	>=0.40.0,<=0.46.1	show Affected versions of the wheel package are vulnerable to Path Traversal due to applying extracted file permissions using an unsanitized archive pathname. The vulnerable logic is in wheel.cli.unpack.unpack (and setuptools._vendor.wheel.cli.unpack.unpack), where the code calls wf.extract(zinfo, destination) but then performs destination.joinpath(zinfo.filename).chmod(permissions) using zinfo.filename directly, allowing dot-dot-slash sequences to escape the intended directory.

Package

Installed

Affected

Info

wheel

0.40.0

>=0.40.0,<=0.46.1

show

Affected versions of the wheel package are vulnerable to Path Traversal due to applying extracted file permissions using an unsanitized archive pathname. The vulnerable logic is in wheel.cli.unpack.unpack (and setuptools._vendor.wheel.cli.unpack.unpack), where the code calls wf.extract(zinfo, destination) but then performs destination.joinpath(zinfo.filename).chmod(permissions) using zinfo.filename directly, allowing dot-dot-slash sequences to escape the intended directory.

pyup/scheduled-update-2026-07-01

1 month, 1 week ago

102f1253

Update pytest-mock from 3.10.0 to 3.15.1

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2026-07-01

1 month, 1 week ago

a1de5406

Update pytest from 7.2.2 to 9.1.1

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2026-07-01

1 month, 1 week ago

63b26638

Update twine from 4.0.2 to 6.2.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2026-07-01

1 month, 1 week ago

1ecb188f

Update sphinx from 5.3.0 to 9.1.0

No dependencies with known security vulnerabilities.

pyup/scheduled-update-2026-07-01

1 month, 1 week ago

0af777a1

Update coverage from 7.2.3 to 7.14.3

No dependencies with known security vulnerabilities.