Safety CI > spacemanspiff2007/HABApp

Develop

5 years, 2 months ago

17aa861f

updated scheduler

No dependencies with known security vulnerabilities.

Develop

5 years, 2 months ago

bcad7ce1

fixed tests

No dependencies with known security vulnerabilities.

Develop

5 years, 2 months ago

f8c5d1cd

- Scheduler runs only when the rule file has been loaded properly - Replaced thread check for asynci

No dependencies with known security vulnerabilities.

Develop

5 years, 2 months ago

cf9b548c

fixed type (closes #222)

No dependencies with known security vulnerabilities.

Develop

5 years, 2 months ago

5987c976

0.30.3 Dev

No dependencies with known security vulnerabilities.

master

5 years, 2 months ago

9712a373

0.30.2 (#221) - Item and Thing loading from openHAB is more robust and disconnects now properly if

No dependencies with known security vulnerabilities.

Develop

5 years, 2 months ago

46e4cb63

0.30.2

No dependencies with known security vulnerabilities.

Develop

5 years, 2 months ago

0f9b51d1

- renamed HABApp.openhab.exceptions to HABApp.openhab.errors - Item and Thing loading is more robust

No dependencies with known security vulnerabilities.

Develop

5 years, 2 months ago

62a0ca78

updated dependencies (closes #220)

No dependencies with known security vulnerabilities.

Develop

5 years, 2 months ago

9fd7bb6d

- Renamed cmd arg -s to -wos or --wait_os_uptime Does now wait for system startup

pydantic 1.8.1 and pydantic 1.8.1 have known security vulnerabilities.

Package	Installed	Affected	Info
pydantic	1.8.1	<1.10.2	show Pydantic 1.10.2 prevents long strings as int inputs to fix CVE-2020-10735. https://github.com/pydantic/pydantic/commit/eccd85e4d012e70ffbd81f379179da900d4621c5
pydantic	1.8.1	<1.10.13 , >=2.0a1,<2.4.0	show Pydantic 1.10.13 and 2.4.0 include a fix for a regular expression denial of service vulnerability (REDoS). https://github.com/pydantic/pydantic/pull/7360 https://github.com/pydantic/pydantic/pull/7673
pydantic	1.8.1	>=1.8.0a1,<1.8.2 , >=1.7.0a0,<1.7.4 , <1.6.2	show Pydantic 1.8.2, 1.7.4 and 1.6.2 include a fix for CVE-2021-29510: In affected versions of Pydantic passing either `'infinity'`, `'inf'` or `float('inf')` (or their negatives) to `datetime` or `date` fields causes validation to run forever with 100% CPU usage (on one CPU). Pydantic has been patched with fixes available in the following versions: v1.8.2, v1.7.4, v1.6.2. All these versions are available on pypi(https://pypi.org/project/pydantic/#history), and will be available on conda-forge(https://anaconda.org/conda-forge/pydantic) soon. See the changelog(https://pydantic-docs.helpmanual.io/) for details. If you absolutely can't upgrade, you can work around this risk using a validator(https://pydantic-docs.helpmanual.io/usage/validators/) to catch these values. This is not an ideal solution (in particular you'll need a slightly different function for datetimes), instead of a hack like this you should upgrade pydantic. If you are not using v1.8.x, v1.7.x or v1.6.x and are unable to upgrade to a fixed version of pydantic, please create an issue at https://github.com/samuelcolvin/pydantic/issues requesting a back-port, and we will endeavour to release a patch for earlier versions of pydantic.
pydantic	1.8.1	>=2.0.0,<2.4.0 , <1.10.13	show Regular expression denial of service in Pydanic affected versions allows remote attackers to cause denial of service via a crafted email string.
pydantic	1.8.1	<1.10.2	show Pydantic 1.10.2 prevents long strings as int inputs to fix CVE-2020-10735. https://github.com/pydantic/pydantic/commit/eccd85e4d012e70ffbd81f379179da900d4621c5
pydantic	1.8.1	<1.10.13 , >=2.0a1,<2.4.0	show Pydantic 1.10.13 and 2.4.0 include a fix for a regular expression denial of service vulnerability (REDoS). https://github.com/pydantic/pydantic/pull/7360 https://github.com/pydantic/pydantic/pull/7673
pydantic	1.8.1	>=1.8.0a1,<1.8.2 , >=1.7.0a0,<1.7.4 , <1.6.2	show Pydantic 1.8.2, 1.7.4 and 1.6.2 include a fix for CVE-2021-29510: In affected versions of Pydantic passing either `'infinity'`, `'inf'` or `float('inf')` (or their negatives) to `datetime` or `date` fields causes validation to run forever with 100% CPU usage (on one CPU). Pydantic has been patched with fixes available in the following versions: v1.8.2, v1.7.4, v1.6.2. All these versions are available on pypi(https://pypi.org/project/pydantic/#history), and will be available on conda-forge(https://anaconda.org/conda-forge/pydantic) soon. See the changelog(https://pydantic-docs.helpmanual.io/) for details. If you absolutely can't upgrade, you can work around this risk using a validator(https://pydantic-docs.helpmanual.io/usage/validators/) to catch these values. This is not an ideal solution (in particular you'll need a slightly different function for datetimes), instead of a hack like this you should upgrade pydantic. If you are not using v1.8.x, v1.7.x or v1.6.x and are unable to upgrade to a fixed version of pydantic, please create an issue at https://github.com/samuelcolvin/pydantic/issues requesting a back-port, and we will endeavour to release a patch for earlier versions of pydantic.
pydantic	1.8.1	>=2.0.0,<2.4.0 , <1.10.13	show Regular expression denial of service in Pydanic affected versions allows remote attackers to cause denial of service via a crafted email string.

dependabot/pip/pydantic-1.8.2

5 years, 2 months ago

deb00b52

Bump pydantic from 1.8.1 to 1.8.2 Bumps [pydantic](https://github.com/samuelcolvin/pydantic) from 1

No dependencies with known security vulnerabilities.

Develop

5 years, 2 months ago

1bfb6e80

flake fixes -.-

No dependencies with known security vulnerabilities.

Develop

5 years, 2 months ago

29654924

More item tests

No dependencies with known security vulnerabilities.

Develop

5 years, 3 months ago

b49e79b3

0.30.2 Dev

No dependencies with known security vulnerabilities.

master

5 years, 3 months ago

f0ee7a60

0.30.1 (#219) 0.30.1: - latitude is now set correctly for sunrise/sunset calculation (closes #217)

No dependencies with known security vulnerabilities.