Safety CI > tawilkinson/boardgamebot

main

1 year, 8 months ago

d9690d5c

Merge pull request #241 from tawilkinson/pyup-update-scikit-learn-1.4.2-to-1.5.0 Update scikit-lear

No dependencies with known security vulnerabilities.

main

1 year, 8 months ago

a0df7398

Merge pull request #242 from tawilkinson/pyup-update-requests-2.32.1-to-2.32.2 Update requests to 2

No dependencies with known security vulnerabilities.

pyup-update-requests-2.32.1-to-2.32.2

1 year, 8 months ago

474cf6fd

Update requests from 2.32.1 to 2.32.2

No dependencies with known security vulnerabilities.

pyup-update-scikit-learn-1.4.2-to-1.5.0

1 year, 8 months ago

3c0c77b6

Update scikit-learn from 1.4.2 to 1.5.0

No dependencies with known security vulnerabilities.

main

1 year, 8 months ago

692cdbe7

Merge pull request #240 from tawilkinson/pyup-update-requests-2.31.0-to-2.32.1 Update requests to 2

No dependencies with known security vulnerabilities.

main

1 year, 8 months ago

78a858db

Merge pull request #239 from tawilkinson/pyup-update-emoji-2.11.1-to-2.12.1 Update emoji to 2.12.1

requests 2.31.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.31.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.31.0	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

Package

Installed

Affected

Info

requests

2.31.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

requests

2.31.0

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

main

1 year, 8 months ago

5cf225fe

Merge pull request #237 from tawilkinson/pyup-update-lxml-5.2.1-to-5.2.2 Update lxml to 5.2.2

requests 2.31.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.31.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.31.0	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

Package

Installed

Affected

Info

requests

2.31.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

requests

2.31.0

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

pyup-update-requests-2.31.0-to-2.32.1

1 year, 8 months ago

dab8e130

Update requests from 2.31.0 to 2.32.1

No dependencies with known security vulnerabilities.

pyup-update-emoji-2.11.1-to-2.12.1

1 year, 8 months ago

c59b58bf

Update emoji from 2.11.1 to 2.12.1

No dependencies with known security vulnerabilities.

pyup-update-emoji-2.11.1-to-2.12.0

1 year, 8 months ago

fe97219a

Update emoji from 2.11.1 to 2.12.0

No dependencies with known security vulnerabilities.

pyup-update-lxml-5.2.1-to-5.2.2

1 year, 8 months ago

edd8a02e

Update lxml from 5.2.1 to 5.2.2

No dependencies with known security vulnerabilities.

main

1 year, 9 months ago

9cb9e85d

chore: bump python version

No dependencies with known security vulnerabilities.

main

1 year, 9 months ago

461f6169

Merge pull request #235 from tawilkinson/pyup-update-scikit_image-0.22.0-to-0.23.2 Update scikit_im

No dependencies with known security vulnerabilities.

pyup-update-scikit_image-0.22.0-to-0.23.2

1 year, 9 months ago

95a32c76

Merge branch 'main' into pyup-update-scikit_image-0.22.0-to-0.23.2

No dependencies with known security vulnerabilities.

main

1 year, 9 months ago

33507b9e

Merge pull request #222 from tawilkinson/pyup-update-python_dotenv-0.21.1-to-1.0.1 Update python_do

No dependencies with known security vulnerabilities.