Safety CI > sys-git/certifiable

pyup-update-tox-2.8.2-to-3.2.1

7 years, 1 month ago

57bebca1

Update tox from 2.8.2 to 3.2.1

No dependencies with known security vulnerabilities.

pyup-update-tox-2.8.2-to-3.2.1

7 years, 1 month ago

a9ffcea3

Update tox from 2.8.2 to 3.2.1

No dependencies with known security vulnerabilities.

pyup-pin-pylint-2.1.1

7 years, 1 month ago

d504f542

Pin pylint to latest version 2.1.1

No dependencies with known security vulnerabilities.

pyup-update-tox-2.8.2-to-3.1.3

7 years, 1 month ago

2a4b32b3

Update tox from 2.8.2 to 3.1.3

No dependencies with known security vulnerabilities.

pyup-update-tox-2.8.2-to-3.1.3

7 years, 1 month ago

fad072df

Update tox from 2.8.2 to 3.1.3

No dependencies with known security vulnerabilities.

pyup-update-lxml-3.8.0-to-4.2.4

7 years, 1 month ago

19d2e968

Update lxml from 3.8.0 to 4.2.4

No dependencies with known security vulnerabilities.

pyup-pin-pylint-2.1.0

7 years, 1 month ago

824ebbfa

Pin pylint to latest version 2.1.0

No dependencies with known security vulnerabilities.

pyup-pin-pylint-2.0.1

7 years, 2 months ago

a6ee5214

Pin pylint to latest version 2.0.1

PyYAML 3.12 and PyYAML 3.12 have known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.12	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.12	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

pyup-update-pip-9.0.1-to-18.0

7 years, 2 months ago

0dd84ca5

Update pip from 9.0.1 to 18.0

PyYAML 3.12 and PyYAML 3.12 have known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.12	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.12	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

pyup-update-sphinx-1.6.3-to-1.7.6

7 years, 2 months ago

f90ddcb2

Update sphinx from 1.6.3 to 1.7.6

No dependencies with known security vulnerabilities.

pyup-update-sphinx-1.6.3-to-1.7.6

7 years, 2 months ago

8185c7f8

Update sphinx from 1.6.3 to 1.7.6

No dependencies with known security vulnerabilities.

pyup-pin-pylint-2.0.0

7 years, 2 months ago

0a6fe592

Pin pylint to latest version 2.0.0

No dependencies with known security vulnerabilities.

pyup-update-tox-2.8.2-to-3.1.2

7 years, 2 months ago

9f94c16b

Update tox from 2.8.2 to 3.1.2

No dependencies with known security vulnerabilities.

pyup-update-tox-2.8.2-to-3.1.2

7 years, 2 months ago

9bc90a63

Update tox from 2.8.2 to 3.1.2

No dependencies with known security vulnerabilities.

pyup-update-tox-2.8.2-to-3.1.1

7 years, 2 months ago

43cc3292

Update tox from 2.8.2 to 3.1.1

No dependencies with known security vulnerabilities.