Safety CI > sacherjj/simple

pyup-scheduled-update-2018-10-01

8 years, 1 month ago

3e0d2ea7

Update cryptography from 1.9 to 2.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2018-09-24

8 years, 1 month ago

d450a3bc

Update cryptography from 1.9 to 2.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2018-09-17

8 years, 1 month ago

9e9ab9fb

Update cryptography from 1.9 to 2.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2018-09-10

8 years, 2 months ago

b8520250

Update cryptography from 1.9 to 2.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2018-09-03

8 years, 2 months ago

9856133f

Update cryptography from 1.9 to 2.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2018-08-27

8 years, 2 months ago

181fb71d

Update cryptography from 1.9 to 2.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2018-08-20

8 years, 2 months ago

eacca155

Update cryptography from 1.9 to 2.3.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2018-08-13

8 years, 3 months ago

5dcd7208

Update cryptography from 1.9 to 2.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2018-08-06

8 years, 3 months ago

2b737183

Update cryptography from 1.9 to 2.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2018-07-30

8 years, 3 months ago

bacc8036

Update pyyaml from 3.12 to 3.13

PyYAML 3.13 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.13	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.13	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.13

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.13

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-scheduled-update-2018-07-30

8 years, 3 months ago

2c829ba8

Update cryptography from 1.9 to 2.3

PyYAML 3.12 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.12

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.12

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-scheduled-update-2018-07-23

8 years, 3 months ago

9fab678c

Update pyyaml from 3.12 to 3.13

PyYAML 3.13 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.13	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.13	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.13

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.13

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

development

9 years ago

5866bc1a

Create .pyup.yml

No dependencies with known security vulnerabilities.

pyup-update-cryptography-1.9-to-2.1.2

9 years ago

4343d429

Update cryptography from 1.9 to 2.1.2

No dependencies with known security vulnerabilities.

pyup-update-flake8-3.3.0-to-3.5.0

9 years ago

c31ba8c3

Update flake8 from 3.3.0 to 3.5.0

No dependencies with known security vulnerabilities.

sacherjj/simple_zpl2