Safety CI > stephenhky/PyShortTextCategorization

pyup-update-keras-2.13.1-to-3.2.0

1 month, 1 week ago

4b74414b

Update keras from 2.13.1 to 3.2.0

No dependencies with known security vulnerabilities.

pyup-update-joblib-1.3.0-to-1.4.0

1 month, 1 week ago

13bfcffc

Update joblib from 1.3.0 to 1.4.0

No dependencies with known security vulnerabilities.

pyup-update-python-levenshtein-0.23.0-to-0.25.1

1 month, 1 week ago

8425c53e

Update python-levenshtein from 0.23.0 to 0.25.1

No dependencies with known security vulnerabilities.

pyup-update-scipy-1.12.0-to-1.13.0

1 month, 2 weeks ago

d253d11c

Update scipy from 1.12.0 to 1.13.0

No dependencies with known security vulnerabilities.

master

1 month, 2 weeks ago

c0cedef2

updated requirements for transformers due to security vulnerabilities

No dependencies with known security vulnerabilities.

master

1 month, 2 weeks ago

be9522a6

updated requirements for transformers due to security vulnerabilities

transformers 4.36.0 has known security vulnerabilities.

Package	Installed	Affected	Info
transformers	4.36.0	<4.37.0	show Transformers is affected by a shell injection vulnerability. It appears that while this issue is generally not critical for the library's primary use cases, it can become more significant in specific production environments. Particularly in scenarios where the library interacts with user-generated input — such as in web application backends, desktop applications, and cloud-based ML services — the risk of arbitrary code execution increases. https://github.com/huggingface/transformers/pull/28299

Package

Installed

Affected

Info

transformers

4.36.0

<4.37.0

show

Transformers is affected by a shell injection vulnerability. It appears that while this issue is generally not critical for the library's primary use cases, it can become more significant in specific production environments. Particularly in scenarios where the library interacts with user-generated input — such as in web application backends, desktop applications, and cloud-based ML services — the risk of arbitrary code execution increases.
https://github.com/huggingface/transformers/pull/28299

pyup-update-numpy-1.24.0-to-1.26.4

1 month, 2 weeks ago

b0efc27c

Merge branch 'master' into pyup-update-numpy-1.24.0-to-1.26.4

transformers 4.36.0 has known security vulnerabilities.

Package	Installed	Affected	Info
transformers	4.36.0	<4.37.0	show Transformers is affected by a shell injection vulnerability. It appears that while this issue is generally not critical for the library's primary use cases, it can become more significant in specific production environments. Particularly in scenarios where the library interacts with user-generated input — such as in web application backends, desktop applications, and cloud-based ML services — the risk of arbitrary code execution increases. https://github.com/huggingface/transformers/pull/28299

Package

Installed

Affected

Info

transformers

4.36.0

<4.37.0

show

Transformers is affected by a shell injection vulnerability. It appears that while this issue is generally not critical for the library's primary use cases, it can become more significant in specific production environments. Particularly in scenarios where the library interacts with user-generated input — such as in web application backends, desktop applications, and cloud-based ML services — the risk of arbitrary code execution increases.
https://github.com/huggingface/transformers/pull/28299

master

1 month, 2 weeks ago

09e56f22

Merge pull request #206 from stephenhky/pyup-update-scipy-1.11.4-to-1.12.0 Update scipy to 1.12.0

transformers 4.36.0 has known security vulnerabilities.

Package	Installed	Affected	Info
transformers	4.36.0	<4.37.0	show Transformers is affected by a shell injection vulnerability. It appears that while this issue is generally not critical for the library's primary use cases, it can become more significant in specific production environments. Particularly in scenarios where the library interacts with user-generated input — such as in web application backends, desktop applications, and cloud-based ML services — the risk of arbitrary code execution increases. https://github.com/huggingface/transformers/pull/28299

Package

Installed

Affected

Info

transformers

4.36.0

<4.37.0

show

Transformers is affected by a shell injection vulnerability. It appears that while this issue is generally not critical for the library's primary use cases, it can become more significant in specific production environments. Particularly in scenarios where the library interacts with user-generated input — such as in web application backends, desktop applications, and cloud-based ML services — the risk of arbitrary code execution increases.
https://github.com/huggingface/transformers/pull/28299

pyup-update-transformers-4.36.0-to-4.39.3

1 month, 2 weeks ago

1ea8e110

Update transformers from 4.36.0 to 4.39.3

No dependencies with known security vulnerabilities.

pyup-update-cython-3.0.7-to-3.0.10

1 month, 2 weeks ago

d26ca452

Update cython from 3.0.7 to 3.0.10

transformers 4.36.0 has known security vulnerabilities.

Package	Installed	Affected	Info
transformers	4.36.0	<4.37.0	show Transformers is affected by a shell injection vulnerability. It appears that while this issue is generally not critical for the library's primary use cases, it can become more significant in specific production environments. Particularly in scenarios where the library interacts with user-generated input — such as in web application backends, desktop applications, and cloud-based ML services — the risk of arbitrary code execution increases. https://github.com/huggingface/transformers/pull/28299

Package

Installed

Affected

Info

transformers

4.36.0

<4.37.0

show

Transformers is affected by a shell injection vulnerability. It appears that while this issue is generally not critical for the library's primary use cases, it can become more significant in specific production environments. Particularly in scenarios where the library interacts with user-generated input — such as in web application backends, desktop applications, and cloud-based ML services — the risk of arbitrary code execution increases.
https://github.com/huggingface/transformers/pull/28299

pyup-update-transformers-4.36.0-to-4.39.2

1 month, 2 weeks ago

805427e8

Update transformers from 4.36.0 to 4.39.2

No dependencies with known security vulnerabilities.

pyup-update-torch-2.0.1-to-2.2.2

1 month, 2 weeks ago

6ae691d9

Update torch from 2.0.1 to 2.2.2

transformers 4.36.0 has known security vulnerabilities.

Package	Installed	Affected	Info
transformers	4.36.0	<4.37.0	show Transformers is affected by a shell injection vulnerability. It appears that while this issue is generally not critical for the library's primary use cases, it can become more significant in specific production environments. Particularly in scenarios where the library interacts with user-generated input — such as in web application backends, desktop applications, and cloud-based ML services — the risk of arbitrary code execution increases. https://github.com/huggingface/transformers/pull/28299

Package

Installed

Affected

Info

transformers

4.36.0

<4.37.0

show

Transformers is affected by a shell injection vulnerability. It appears that while this issue is generally not critical for the library's primary use cases, it can become more significant in specific production environments. Particularly in scenarios where the library interacts with user-generated input — such as in web application backends, desktop applications, and cloud-based ML services — the risk of arbitrary code execution increases.
https://github.com/huggingface/transformers/pull/28299

pyup-update-transformers-4.36.0-to-4.39.1

1 month, 3 weeks ago

e99583a3

Update transformers from 4.36.0 to 4.39.1

No dependencies with known security vulnerabilities.

pyup-update-transformers-4.36.0-to-4.39.0

1 month, 3 weeks ago

4f378a8c

Update transformers from 4.36.0 to 4.39.0

No dependencies with known security vulnerabilities.

pyup-update-keras-2.13.1-to-3.1.1

1 month, 4 weeks ago

17f35f1c

Update keras from 2.13.1 to 3.1.1

transformers 4.36.0 has known security vulnerabilities.

Package	Installed	Affected	Info
transformers	4.36.0	<4.37.0	show Transformers is affected by a shell injection vulnerability. It appears that while this issue is generally not critical for the library's primary use cases, it can become more significant in specific production environments. Particularly in scenarios where the library interacts with user-generated input — such as in web application backends, desktop applications, and cloud-based ML services — the risk of arbitrary code execution increases. https://github.com/huggingface/transformers/pull/28299

Package

Installed

Affected

Info

transformers

4.36.0

<4.37.0

show

Transformers is affected by a shell injection vulnerability. It appears that while this issue is generally not critical for the library's primary use cases, it can become more significant in specific production environments. Particularly in scenarios where the library interacts with user-generated input — such as in web application backends, desktop applications, and cloud-based ML services — the risk of arbitrary code execution increases.
https://github.com/huggingface/transformers/pull/28299