Safety CI > simbaTmotsi/eye-vision

pyup-update-setuptools-40.6.2-to-66.1.0

3 years, 1 month ago

334792ed

Update setuptools from 40.6.2 to 66.1.0

No dependencies with known security vulnerabilities.

pyup-update-setuptools-40.6.2-to-66.0.0

3 years, 2 months ago

100d4f12

Update setuptools from 40.6.2 to 66.0.0

No dependencies with known security vulnerabilities.

pyup-update-matplotlib-3.0.2-to-3.6.3

3 years, 2 months ago

fe0e9b11

Update matplotlib from 3.0.2 to 3.6.3

setuptools 40.6.2 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	40.6.2	<70.0.0	show Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
setuptools	40.6.2	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
setuptools	40.6.2	<78.1.1	show Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

Package

Installed

Affected

Info

setuptools

40.6.2

<70.0.0

show

Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.

setuptools

40.6.2

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

setuptools

40.6.2

<78.1.1

show

Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

pyup-update-setuptools-40.6.2-to-65.7.0

3 years, 2 months ago

8c3df93c

Update setuptools from 40.6.2 to 65.7.0

No dependencies with known security vulnerabilities.

pyup-update-opencv_contrib_python-3.4.3.18-to-4.7.0.68

3 years, 2 months ago

255a7ea2

Update opencv_contrib_python from 3.4.3.18 to 4.7.0.68

setuptools 40.6.2 has known security vulnerabilities.

Package	Installed	Affected	Info
setuptools	40.6.2	<70.0.0	show Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
setuptools	40.6.2	<65.5.1	show Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
setuptools	40.6.2	<78.1.1	show Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

Package

Installed

Affected

Info

setuptools

40.6.2

<70.0.0

show

Affected versions of Setuptools allow for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.

setuptools

40.6.2

<65.5.1

show

Setuptools 65.5.1 includes a fix for CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.

setuptools

40.6.2

<78.1.1

show

Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

pyup-update-setuptools-40.6.2-to-65.6.3

3 years, 3 months ago

35eac1e5

Update setuptools from 40.6.2 to 65.6.3

No dependencies with known security vulnerabilities.

pyup-update-setuptools-40.6.2-to-65.6.2

3 years, 3 months ago

d71e705c

Update setuptools from 40.6.2 to 65.6.2

No dependencies with known security vulnerabilities.

pyup-update-setuptools-40.6.2-to-65.6.1

3 years, 3 months ago

885e6a98

Update setuptools from 40.6.2 to 65.6.1

No dependencies with known security vulnerabilities.

pyup-update-setuptools-40.6.2-to-65.6.0

3 years, 4 months ago

54398219

Update setuptools from 40.6.2 to 65.6.0

No dependencies with known security vulnerabilities.

pyup-update-setuptools-40.6.2-to-65.5.1

3 years, 4 months ago

505e26fb

Update setuptools from 40.6.2 to 65.5.1

No dependencies with known security vulnerabilities.

pyup-update-matplotlib-3.0.2-to-3.6.2

3 years, 4 months ago

f673dcc3

Update matplotlib from 3.0.2 to 3.6.2

No dependencies with known security vulnerabilities.

pyup-update-setuptools-40.6.2-to-65.5.0

3 years, 5 months ago

a28d54bc

Update setuptools from 40.6.2 to 65.5.0

No dependencies with known security vulnerabilities.

pyup-update-matplotlib-3.0.2-to-3.6.1

3 years, 5 months ago

90de697e

Update matplotlib from 3.0.2 to 3.6.1

No dependencies with known security vulnerabilities.

pyup-update-setuptools-40.6.2-to-65.4.1

3 years, 5 months ago

03ae0af6

Update setuptools from 40.6.2 to 65.4.1

No dependencies with known security vulnerabilities.

pyup-update-setuptools-40.6.2-to-65.4.0

3 years, 5 months ago

4acaf963

Update setuptools from 40.6.2 to 65.4.0

No dependencies with known security vulnerabilities.