Safety CI > tawilkinson/boardgamebot

pyup-update-cachetools-7.0.1-to-7.0.6

1 week, 2 days ago

10dd4454

Update cachetools from 7.0.1 to 7.0.6

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-lxml-6.0.2-to-6.1.0

1 week, 4 days ago

1471f932

Update lxml from 6.0.2 to 6.1.0

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-lxml-6.0.2-to-6.0.4

2 weeks, 3 days ago

afe8a222

Update lxml from 6.0.2 to 6.0.4

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-lxml-6.0.2-to-6.0.3

2 weeks, 6 days ago

1751fdf1

Update lxml from 6.0.2 to 6.0.3

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-requests-2.32.5-to-2.33.1

4 weeks, 1 day ago

19e42d5e

Update requests from 2.32.5 to 2.33.1

No dependencies with known security vulnerabilities.

pyup-update-numpy-2.4.2-to-2.4.4

1 month ago

df25a413

Update numpy from 2.4.2 to 2.4.4

requests 2.32.5 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.32.5	<2.33.0	show Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

Package

Installed

Affected

Info

requests

2.32.5

<2.33.0

show

Affected versions of the requests package are vulnerable to Insecure Temporary File reuse due to predictable temporary filename generation in extract_zipped_paths(). The requests.utils.extract_zipped_paths() utility extracts files from zip archives into the system temporary directory using a deterministic path, and if that file already exists, the function reuses it without validating that it is the expected extracted content.

pyup-update-requests-2.32.5-to-2.33.0

1 month ago

745d8c90

Update requests from 2.32.5 to 2.33.0

No dependencies with known security vulnerabilities.

pyup-update-cachetools-7.0.1-to-7.0.5

1 month, 3 weeks ago

1733c59d

Update cachetools from 7.0.1 to 7.0.5

No dependencies with known security vulnerabilities.

pyup-update-numpy-2.4.2-to-2.4.3

1 month, 3 weeks ago

11bc2148

Update numpy from 2.4.2 to 2.4.3

No dependencies with known security vulnerabilities.

pyup-update-cachetools-7.0.1-to-7.0.4

1 month, 3 weeks ago

00b2a933

Update cachetools from 7.0.1 to 7.0.4

No dependencies with known security vulnerabilities.

pyup-update-cachetools-7.0.1-to-7.0.3

1 month, 3 weeks ago

01c94b72

Update cachetools from 7.0.1 to 7.0.3

No dependencies with known security vulnerabilities.

pyup-update-discord.py-2.7.0-to-2.7.1

1 month, 3 weeks ago

4bbe5ce7

Update discord.py from 2.7.0 to 2.7.1

No dependencies with known security vulnerabilities.

pyup-update-python_dotenv-1.2.1-to-1.2.2

1 month, 4 weeks ago

906fe771

Update python_dotenv from 1.2.1 to 1.2.2

No dependencies with known security vulnerabilities.

pyup-update-cachetools-7.0.1-to-7.0.2

1 month, 4 weeks ago

5d1699dd

Update cachetools from 7.0.1 to 7.0.2

No dependencies with known security vulnerabilities.

main

2 months ago

63e84ba5

Merge pull request #326 from tawilkinson/pyup-update-discord.py-2.6.3-to-2.7.0 Update discord.py to

No dependencies with known security vulnerabilities.