Safety CI > simbaTmotsi/eye-vision

pyup-update-setuptools-40.6.2-to-69.0.2

1 year, 8 months ago

Update setuptools from 40.6.2 to 69.0.2

opencv_contrib_python 3.4.3.18 has known security vulnerabilities.

Package	Installed	Affected	Info
opencv_contrib_python	3.4.3.18	>=0,<4.1.1.26	show An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

pyup-update-setuptools-40.6.2-to-69.0.1

1 year, 8 months ago

7e5c415c

Update setuptools from 40.6.2 to 69.0.1

opencv_contrib_python 3.4.3.18 has known security vulnerabilities.

Package	Installed	Affected	Info
opencv_contrib_python	3.4.3.18	>=0,<4.1.1.26	show An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

pyup-update-setuptools-40.6.2-to-69.0.0

1 year, 8 months ago

4e94ff0e

Update setuptools from 40.6.2 to 69.0.0

opencv_contrib_python 3.4.3.18 has known security vulnerabilities.

Package	Installed	Affected	Info
opencv_contrib_python	3.4.3.18	>=0,<4.1.1.26	show An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

pyup-update-matplotlib-3.0.2-to-3.8.2

1 year, 8 months ago

ec258b9d

Update matplotlib from 3.0.2 to 3.8.2

setuptools 40.6.2 and opencv_contrib_python 3.4.3.18 have known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	40.6.2	<78.1.1	show Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.
setuptools	40.6.2	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
setuptools	40.6.2	<70.0.0	show Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
opencv_contrib_python	3.4.3.18	>=0,<4.1.1.26	show An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

pyup-update-matplotlib-3.0.2-to-3.8.1

1 year, 9 months ago

f519d504

Update matplotlib from 3.0.2 to 3.8.1

setuptools 40.6.2 and opencv_contrib_python 3.4.3.18 have known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	40.6.2	<78.1.1	show Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.
setuptools	40.6.2	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
setuptools	40.6.2	<70.0.0	show Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
opencv_contrib_python	3.4.3.18	>=0,<4.1.1.26	show An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

pyup-update-opencv_contrib_python-3.4.3.18-to-4.8.1.78

1 year, 9 months ago

0d586770

Update opencv_contrib_python from 3.4.3.18 to 4.8.1.78

setuptools 40.6.2 has known security vulnerabilities.

Package

Installed

Affected

Info

setuptools

40.6.2

<78.1.1

show

Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

setuptools

40.6.2

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

setuptools

40.6.2

<70.0.0

show

Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.

pyup-update-matplotlib-3.0.2-to-3.8.0

1 year, 10 months ago

0992a17b

Update matplotlib from 3.0.2 to 3.8.0

setuptools 40.6.2 and opencv_contrib_python 3.4.3.18 have known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	40.6.2	<78.1.1	show Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.
setuptools	40.6.2	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
setuptools	40.6.2	<70.0.0	show Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
opencv_contrib_python	3.4.3.18	>=0,<4.1.1.26	show An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

pyup-update-setuptools-40.6.2-to-68.2.2

1 year, 11 months ago

4e1f5091

Update setuptools from 40.6.2 to 68.2.2

opencv_contrib_python 3.4.3.18 has known security vulnerabilities.

Package	Installed	Affected	Info
opencv_contrib_python	3.4.3.18	>=0,<4.1.1.26	show An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

pyup-update-matplotlib-3.0.2-to-3.7.3

1 year, 11 months ago

524b52e3

Update matplotlib from 3.0.2 to 3.7.3

setuptools 40.6.2 and opencv_contrib_python 3.4.3.18 have known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	40.6.2	<78.1.1	show Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.
setuptools	40.6.2	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
setuptools	40.6.2	<70.0.0	show Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
opencv_contrib_python	3.4.3.18	>=0,<4.1.1.26	show An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

pyup-update-setuptools-40.6.2-to-68.2.1

1 year, 11 months ago

f0a42d4c

Update setuptools from 40.6.2 to 68.2.1

opencv_contrib_python 3.4.3.18 has known security vulnerabilities.

Package	Installed	Affected	Info
opencv_contrib_python	3.4.3.18	>=0,<4.1.1.26	show An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

pyup-update-setuptools-40.6.2-to-68.2.0

1 year, 11 months ago

ac41b396

Update setuptools from 40.6.2 to 68.2.0

opencv_contrib_python 3.4.3.18 has known security vulnerabilities.

Package	Installed	Affected	Info
opencv_contrib_python	3.4.3.18	>=0,<4.1.1.26	show An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

pyup-update-setuptools-40.6.2-to-68.1.2

1 year, 11 months ago

1e98dd3f

Update setuptools from 40.6.2 to 68.1.2

opencv_contrib_python 3.4.3.18 has known security vulnerabilities.

Package	Installed	Affected	Info
opencv_contrib_python	3.4.3.18	>=0,<4.1.1.26	show An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

pyup-update-setuptools-40.6.2-to-68.1.0

1 year, 11 months ago

4b3fc9b4

Update setuptools from 40.6.2 to 68.1.0

opencv_contrib_python 3.4.3.18 has known security vulnerabilities.

Package	Installed	Affected	Info
opencv_contrib_python	3.4.3.18	>=0,<4.1.1.26	show An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

pyup-update-opencv_contrib_python-3.4.3.18-to-4.8.0.76

2 years ago

ce8fbfac

Update opencv_contrib_python from 3.4.3.18 to 4.8.0.76

setuptools 40.6.2 has known security vulnerabilities.

Package

Installed

Affected

Info

setuptools

40.6.2

<78.1.1

show

Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

setuptools

40.6.2

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

setuptools

40.6.2

<70.0.0

show

Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.

pyup-update-matplotlib-3.0.2-to-3.7.2

2 years, 1 month ago

1ec9e5bf

Update matplotlib from 3.0.2 to 3.7.2

setuptools 40.6.2 and opencv_contrib_python 3.4.3.18 have known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	40.6.2	<78.1.1	show Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.
setuptools	40.6.2	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
setuptools	40.6.2	<70.0.0	show Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
opencv_contrib_python	3.4.3.18	>=0,<4.1.1.26	show An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.