Safety CI > tawilkinson/boardgamebot

pyup-update-numpy-2.3.1-to-2.3.2

1 week, 1 day ago

fe509b0d

Update numpy from 2.3.1 to 2.3.2

No dependencies with known security vulnerabilities.

main

1 week, 1 day ago

de531143

Merge pull request #295 from tawilkinson/pyup-update-scikit-learn-1.7.0-to-1.7.1 Update scikit-lear

No dependencies with known security vulnerabilities.

pyup-update-scikit-learn-1.7.0-to-1.7.1

2 weeks ago

60dac2f7

Update scikit-learn from 1.7.0 to 1.7.1

No dependencies with known security vulnerabilities.

main

1 month ago

8fad48b8

Merge pull request #294 from tawilkinson/pyup-update-python_dotenv-1.1.0-to-1.1.1 Update python_dot

No dependencies with known security vulnerabilities.

pyup-update-python_dotenv-1.1.0-to-1.1.1

1 month ago

55aae79f

Merge branch 'main' into pyup-update-python_dotenv-1.1.0-to-1.1.1

No dependencies with known security vulnerabilities.

main

1 month ago

75fe346d

Merge pull request #293 from tawilkinson/pyup-update-lxml-5.4.0-to-6.0.0 Update lxml to 6.0.0

No dependencies with known security vulnerabilities.

pyup-update-lxml-5.4.0-to-6.0.0

1 month ago

0fc3656c

Merge branch 'main' into pyup-update-lxml-5.4.0-to-6.0.0

No dependencies with known security vulnerabilities.

main

1 month ago

ee249dae

Merge pull request #292 from tawilkinson/pyup-update-numpy-2.2.5-to-2.3.1 Update numpy to 2.3.1

No dependencies with known security vulnerabilities.

main

1 month ago

e72f4a5c

Merge pull request #291 from tawilkinson/pyup-update-cachetools-5.5.2-to-6.1.0 Update cachetools to

No dependencies with known security vulnerabilities.

main

1 month ago

d4a6cd0d

Merge pull request #290 from tawilkinson/pyup-update-requests-2.32.3-to-2.32.4 Update requests to 2

No dependencies with known security vulnerabilities.

main

1 month ago

e602ab39

Merge pull request #288 from tawilkinson/pyup-update-scikit-learn-1.6.1-to-1.7.0 Update scikit-lear

requests 2.32.3 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.3	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

Package

Installed

Affected

Info

requests

2.32.3

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

pyup-update-python_dotenv-1.1.0-to-1.1.1

1 month ago

50d8fb8b

Update python_dotenv from 1.1.0 to 1.1.1

requests 2.32.3 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.3	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

Package

Installed

Affected

Info

requests

2.32.3

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

pyup-update-lxml-5.4.0-to-6.0.0

1 month ago

82f58dc9

Update lxml from 5.4.0 to 6.0.0

requests 2.32.3 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.3	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

Package

Installed

Affected

Info

requests

2.32.3

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

pyup-update-numpy-2.2.5-to-2.3.1

1 month, 1 week ago

37cbd7b6

Update numpy from 2.2.5 to 2.3.1

requests 2.32.3 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.3	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

Package

Installed

Affected

Info

requests

2.32.3

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

pyup-update-cachetools-5.5.2-to-6.1.0

1 month, 2 weeks ago

6336dc50

Update cachetools from 5.5.2 to 6.1.0

requests 2.32.3 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.3	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

Package

Installed

Affected

Info

requests

2.32.3

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.