Safety CI > spacemanspiff2007/HABApp

pyup-update-stack_data-0.4.0-to-0.5.1

3 years, 10 months ago

c0d2fe24

Update stack_data from 0.4.0 to 0.5.1

pydantic 1.9.2 has known security vulnerabilities.

Package	Installed	Affected	Info
pydantic	1.9.2	<1.10.2	show Pydantic 1.10.2 prevents long strings as int inputs to fix CVE-2020-10735. https://github.com/pydantic/pydantic/commit/eccd85e4d012e70ffbd81f379179da900d4621c5
pydantic	1.9.2	<1.10.13 , >=2.0a1,<2.4.0	show Pydantic 1.10.13 and 2.4.0 include a fix for a regular expression denial of service vulnerability (REDoS). https://github.com/pydantic/pydantic/pull/7360 https://github.com/pydantic/pydantic/pull/7673
pydantic	1.9.2	>=2.0.0,<2.4.0 , <1.10.13	show Regular expression denial of service in Pydanic affected versions allows remote attackers to cause denial of service via a crafted email string.

Package

Installed

Affected

Info

pydantic

1.9.2

<1.10.2

show

Pydantic 1.10.2 prevents long strings as int inputs to fix CVE-2020-10735.
https://github.com/pydantic/pydantic/commit/eccd85e4d012e70ffbd81f379179da900d4621c5

pydantic

1.9.2

<1.10.13 , >=2.0a1,<2.4.0

show

Pydantic 1.10.13 and 2.4.0 include a fix for a regular expression denial of service vulnerability (REDoS).
https://github.com/pydantic/pydantic/pull/7360
https://github.com/pydantic/pydantic/pull/7673

pydantic

1.9.2

>=2.0.0,<2.4.0 , <1.10.13

show

Regular expression denial of service in Pydanic affected versions allows remote attackers to cause denial of service via a crafted email string.

pyup-pin-ujson-5.5.0

3 years, 10 months ago

0bed0fe3

Pin ujson to latest version 5.5.0

pydantic 1.9.2 has known security vulnerabilities.

Package	Installed	Affected	Info
pydantic	1.9.2	<1.10.2	show Pydantic 1.10.2 prevents long strings as int inputs to fix CVE-2020-10735. https://github.com/pydantic/pydantic/commit/eccd85e4d012e70ffbd81f379179da900d4621c5
pydantic	1.9.2	<1.10.13 , >=2.0a1,<2.4.0	show Pydantic 1.10.13 and 2.4.0 include a fix for a regular expression denial of service vulnerability (REDoS). https://github.com/pydantic/pydantic/pull/7360 https://github.com/pydantic/pydantic/pull/7673
pydantic	1.9.2	>=2.0.0,<2.4.0 , <1.10.13	show Regular expression denial of service in Pydanic affected versions allows remote attackers to cause denial of service via a crafted email string.

Package

Installed

Affected

Info

pydantic

1.9.2

<1.10.2

show

Pydantic 1.10.2 prevents long strings as int inputs to fix CVE-2020-10735.
https://github.com/pydantic/pydantic/commit/eccd85e4d012e70ffbd81f379179da900d4621c5

pydantic

1.9.2

<1.10.13 , >=2.0a1,<2.4.0

show

Pydantic 1.10.13 and 2.4.0 include a fix for a regular expression denial of service vulnerability (REDoS).
https://github.com/pydantic/pydantic/pull/7360
https://github.com/pydantic/pydantic/pull/7673

pydantic

1.9.2

>=2.0.0,<2.4.0 , <1.10.13

show

Regular expression denial of service in Pydanic affected versions allows remote attackers to cause denial of service via a crafted email string.

pyup-update-immutables-0.18-to-0.19

3 years, 10 months ago

a6bfded6

Update immutables from 0.18 to 0.19

pydantic 1.9.2 has known security vulnerabilities.

Package	Installed	Affected	Info
pydantic	1.9.2	<1.10.2	show Pydantic 1.10.2 prevents long strings as int inputs to fix CVE-2020-10735. https://github.com/pydantic/pydantic/commit/eccd85e4d012e70ffbd81f379179da900d4621c5
pydantic	1.9.2	<1.10.13 , >=2.0a1,<2.4.0	show Pydantic 1.10.13 and 2.4.0 include a fix for a regular expression denial of service vulnerability (REDoS). https://github.com/pydantic/pydantic/pull/7360 https://github.com/pydantic/pydantic/pull/7673
pydantic	1.9.2	>=2.0.0,<2.4.0 , <1.10.13	show Regular expression denial of service in Pydanic affected versions allows remote attackers to cause denial of service via a crafted email string.

Package

Installed

Affected

Info

pydantic

1.9.2

<1.10.2

show

Pydantic 1.10.2 prevents long strings as int inputs to fix CVE-2020-10735.
https://github.com/pydantic/pydantic/commit/eccd85e4d012e70ffbd81f379179da900d4621c5

pydantic

1.9.2

<1.10.13 , >=2.0a1,<2.4.0

show

Pydantic 1.10.13 and 2.4.0 include a fix for a regular expression denial of service vulnerability (REDoS).
https://github.com/pydantic/pydantic/pull/7360
https://github.com/pydantic/pydantic/pull/7673

pydantic

1.9.2

>=2.0.0,<2.4.0 , <1.10.13

show

Regular expression denial of service in Pydanic affected versions allows remote attackers to cause denial of service via a crafted email string.

pyup-pin-pydantic-1.10.2

3 years, 11 months ago

c0a649d9

Pin pydantic to latest version 1.10.2