Safety CI > tawilkinson/boardgamebot

main

1 year ago

dc1601c2

Merge pull request #246 from tawilkinson/pyup-update-discord.py-2.3.2-to-2.4.0 Update discord.py to

No dependencies with known security vulnerabilities.

main

1 year ago

17071302

Merge pull request #245 from tawilkinson/pyup-update-scikit_image-0.23.2-to-0.24.0 Update scikit_im

No dependencies with known security vulnerabilities.

main

1 year ago

31807b4c

Merge pull request #244 from tawilkinson/pyup-update-numpy-1.26.4-to-2.0.0 Update numpy to 2.0.0

No dependencies with known security vulnerabilities.

pyup-update-discord.py-2.3.2-to-2.4.0

1 year ago

a5bf935f

Update discord.py from 2.3.2 to 2.4.0

No dependencies with known security vulnerabilities.

pyup-update-scikit_image-0.23.2-to-0.24.0

1 year ago

64ad18e4

Update scikit_image from 0.23.2 to 0.24.0

No dependencies with known security vulnerabilities.

pyup-update-numpy-1.26.4-to-2.0.0

1 year ago

dc239077

Update numpy from 1.26.4 to 2.0.0

No dependencies with known security vulnerabilities.

main

1 year ago

6e6c3782

Merge pull request #243 from tawilkinson/pyup-update-requests-2.32.2-to-2.32.3 Update requests to 2

No dependencies with known security vulnerabilities.

pyup-update-requests-2.32.2-to-2.32.3

1 year, 1 month ago

1dc22af1

Update requests from 2.32.2 to 2.32.3

No dependencies with known security vulnerabilities.

main

1 year, 1 month ago

d9690d5c

Merge pull request #241 from tawilkinson/pyup-update-scikit-learn-1.4.2-to-1.5.0 Update scikit-lear

No dependencies with known security vulnerabilities.

main

1 year, 1 month ago

a0df7398

Merge pull request #242 from tawilkinson/pyup-update-requests-2.32.1-to-2.32.2 Update requests to 2

No dependencies with known security vulnerabilities.

pyup-update-requests-2.32.1-to-2.32.2

1 year, 1 month ago

474cf6fd

Update requests from 2.32.1 to 2.32.2

No dependencies with known security vulnerabilities.

pyup-update-scikit-learn-1.4.2-to-1.5.0

1 year, 1 month ago

3c0c77b6

Update scikit-learn from 1.4.2 to 1.5.0

No dependencies with known security vulnerabilities.

main

1 year, 1 month ago

692cdbe7

Merge pull request #240 from tawilkinson/pyup-update-requests-2.31.0-to-2.32.1 Update requests to 2

No dependencies with known security vulnerabilities.

main

1 year, 1 month ago

78a858db

Merge pull request #239 from tawilkinson/pyup-update-emoji-2.11.1-to-2.12.1 Update emoji to 2.12.1

requests 2.31.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.31.0	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.31.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

Package

Installed

Affected

Info

requests

2.31.0

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

requests

2.31.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

main

1 year, 1 month ago

5cf225fe

Merge pull request #237 from tawilkinson/pyup-update-lxml-5.2.1-to-5.2.2 Update lxml to 5.2.2

requests 2.31.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.31.0	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
requests	2.31.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

Package

Installed

Affected

Info

requests

2.31.0

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

requests

2.31.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.