Safety CI > scieloorg/opac

master

7 years, 1 month ago

Merge pull request #1101 from robertatakenaka/tk1078b [Tk1078] Migração de páginas HTML considerand

Flask-Admin 1.5.2 has known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699

master

7 years, 1 month ago

4ba91e7d

Merge pull request #1102 from jamilatta/tk1091 Tk1091 - Ajusta o modal do formulário de contato par

Flask-Admin 1.5.2 has known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699

pyup-update-sqlalchemy-utils-0.33.3-to-0.33.8

7 years, 1 month ago

bc450702

Update sqlalchemy-utils from 0.33.3 to 0.33.8

Flask-Admin 1.5.2 has known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699

pyup-update-redis-2.10.6-to-3.0.1

7 years, 1 month ago

1961844e

Update redis from 2.10.6 to 3.0.1

Flask-Admin 1.5.2 has known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699

pyup-update-redis-2.10.6-to-3.0.0.post1

7 years, 1 month ago

faf5540c

Update redis from 2.10.6 to 3.0.0.post1

Flask-Admin 1.5.2 has known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699

master

7 years, 1 month ago

5214f2d0

Merge pull request #1094 from jamilatta/tk1090 Tk1090 - Ajusta o modal do formulário de error para

Flask-Admin 1.5.2 has known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699

pyup-update-mongoengine-0.15.3-to-0.16.1

7 years, 1 month ago

d5c276f9

Update mongoengine from 0.15.3 to 0.16.1

Flask-Admin 1.5.2 has known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699

pyup-update-coverage-4.5.1-to-4.5.2

7 years, 1 month ago

d9b02189

Update coverage from 4.5.1 to 4.5.2

Flask-Admin 1.5.2 has known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699

master

7 years, 1 month ago

7530c5fe

fix: url do js MATHML com config certo e add namespace na tag html (#1096) FIX: #1086 - fix: par

Flask-Admin 1.5.2 has known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699

master

7 years, 1 month ago

42a00047

Merge pull request #1092 from jfunez/1086_fix_mathml add mathjax conf e js no template base dos art

Flask-Admin 1.5.2 has known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699

master

7 years, 1 month ago

f62d174c

Merge pull request #1085 from jamilatta/update_requests Atualiza a requests

Flask-Admin 1.5.2 has known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699

master

7 years, 1 month ago

1cc4c26d

Merge pull request #1083 from robertatakenaka/tk1081 [tk1081] Páginas about acessíveis com slug_nam

Flask-Admin 1.5.2 and requests 2.19.1 have known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699
requests	2.19.1	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.19.1	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.19.1	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.19.1	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

pyup-update-mongoengine-0.15.3-to-0.16.0

7 years, 1 month ago

a865664b

Update mongoengine from 0.15.3 to 0.16.0

Flask-Admin 1.5.2 and requests 2.19.1 have known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699
requests	2.19.1	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.19.1	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.19.1	<=2.19.1	show Requests before 2.20.0 sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests	2.19.1	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

master

7 years, 2 months ago

8084c354

Merge pull request #1084 from patymori/fix-varnish-email-form Correção da request URL no formulário

Flask-Admin 1.5.2 has known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699

master

7 years, 2 months ago

d789fd4d

Merge branch 'patymori-fix-varnish-email-form'

Flask-Admin 1.5.2 has known security vulnerabilities.

Package	Installed	Affected	Info
Flask-Admin	1.5.2	>=1.0.8,<1.5.3	show Flask-Admin 1.5.3 includes a fix for CVE-2018-16516: Helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. https://github.com/flask-admin/flask-admin/pull/1699