Safety CI > tawilkinson/boardgamebot

main

2 years, 5 months ago

e05a4aba

Merge pull request #198 from tawilkinson/pyup-update-lxml-4.9.2-to-4.9.3 Update lxml to 4.9.3

No dependencies with known security vulnerabilities.

pyup-update-lxml-4.9.2-to-4.9.3

2 years, 5 months ago

c4d1ea62

Update lxml from 4.9.2 to 4.9.3

No dependencies with known security vulnerabilities.

main

2 years, 5 months ago

49ea4052

Merge pull request #197 from tawilkinson/pyup-update-scikit-learn-1.2.2-to-1.3.0 Update scikit-lear

No dependencies with known security vulnerabilities.

main

2 years, 5 months ago

391dfda3

Merge pull request #196 from tawilkinson/pyup-update-emoji-2.5.1-to-2.6.0 Update emoji to 2.6.0

No dependencies with known security vulnerabilities.

pyup-update-scikit-learn-1.2.2-to-1.3.0

2 years, 5 months ago

32697bc0

Update scikit-learn from 1.2.2 to 1.3.0

No dependencies with known security vulnerabilities.

pyup-update-emoji-2.5.1-to-2.6.0

2 years, 5 months ago

d4f8609c

Update emoji from 2.5.1 to 2.6.0

No dependencies with known security vulnerabilities.

pyup-update-discord.py-2.3.0-to-2.3.1

2 years, 5 months ago

29d99191

Update discord.py from 2.3.0 to 2.3.1

No dependencies with known security vulnerabilities.

main

2 years, 5 months ago

852d0f68

Merge pull request #194 from tawilkinson/pyup-update-numpy-1.24.3-to-1.25.0 Update numpy to 1.25.0

No dependencies with known security vulnerabilities.

pyup-update-numpy-1.24.3-to-1.25.0

2 years, 6 months ago

ace36b98

Update numpy from 1.24.3 to 1.25.0

No dependencies with known security vulnerabilities.

main

2 years, 6 months ago

fdd340a0

Merge pull request #193 from tawilkinson/pyup-update-emoji-2.5.0-to-2.5.1 Update emoji to 2.5.1

No dependencies with known security vulnerabilities.

main

2 years, 6 months ago

fbd71e1f

chore: update usage image in README

No dependencies with known security vulnerabilities.

pyup-update-emoji-2.5.0-to-2.5.1

2 years, 6 months ago

796ba798

Update emoji from 2.5.0 to 2.5.1

No dependencies with known security vulnerabilities.

main

2 years, 6 months ago

e0cd98dd

Merge pull request #192 from tawilkinson/63-slash-commands 63: slash commands

No dependencies with known security vulnerabilities.

63-slash-commands

2 years, 6 months ago

a573e11c

Merge branch '63-slash-commands' of github.com:tawilkinson/boardgamebot into 63-slash-commands

No dependencies with known security vulnerabilities.

63-slash-commands

2 years, 6 months ago

73df3d9d

Automated autopep8 fixes

requests 2.25.1 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.25.1	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.25.1	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.25.1	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

Package

Installed

Affected

Info

requests

2.25.1

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

requests

2.25.1

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

requests

2.25.1

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.