Safety CI > tilaboy/taxonomy-matcher

pyup-update-flake8-3.7.8-to-3.9.1

1 day, 22 hours ago

09dfa166

Update flake8 from 3.7.8 to 3.9.1

pip 19.1.1, Sphinx 2.1.2 and twine 1.13.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
Sphinx	2.1.2	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.
twine	1.13.0	<2.0.0	show Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

Sphinx

2.1.2

<3.0.4

show

Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.

twine

1.13.0

<2.0.0

show

Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

pyup-update-sphinx-2.1.2-to-3.5.4

6 days, 21 hours ago

d8f994e3

Update sphinx from 2.1.2 to 3.5.4

pip 19.1.1 and twine 1.13.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
twine	1.13.0	<2.0.0	show Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

twine

1.13.0

<2.0.0

show

Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

pyup-update-pytest-5.0.1-to-6.2.3

2 weeks ago

a69a2d88

Update pytest from 5.0.1 to 6.2.3

pip 19.1.1, Sphinx 2.1.2 and twine 1.13.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
Sphinx	2.1.2	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.
twine	1.13.0	<2.0.0	show Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

Sphinx

2.1.2

<3.0.4

show

Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.

twine

1.13.0

<2.0.0

show

Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

pyup-update-sphinx-2.1.2-to-3.5.3

4 weeks ago

d8603106

Update sphinx from 2.1.2 to 3.5.3

pip 19.1.1 and twine 1.13.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
twine	1.13.0	<2.0.0	show Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

twine

1.13.0

<2.0.0

show

Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

pyup-update-twine-1.13.0-to-3.4.1

1 month ago

50f2fb9b

Update twine from 1.13.0 to 3.4.1

pip 19.1.1 and Sphinx 2.1.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
Sphinx	2.1.2	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

Sphinx

2.1.2

<3.0.4

show

Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.

pyup-update-twine-1.13.0-to-3.4.0

1 month ago

23abac2a

Update twine from 1.13.0 to 3.4.0

pip 19.1.1 and Sphinx 2.1.2 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
Sphinx	2.1.2	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

Sphinx

2.1.2

<3.0.4

show

Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.

pyup-update-flake8-3.7.8-to-3.9.0

1 month ago

64eda6ca

Update flake8 from 3.7.8 to 3.9.0

pip 19.1.1, Sphinx 2.1.2 and twine 1.13.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
Sphinx	2.1.2	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.
twine	1.13.0	<2.0.0	show Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

Sphinx

2.1.2

<3.0.4

show

Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.

twine

1.13.0

<2.0.0

show

Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

pyup-update-sphinx-2.1.2-to-3.5.2

1 month, 1 week ago

986426be

Update sphinx from 2.1.2 to 3.5.2

pip 19.1.1 and twine 1.13.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
twine	1.13.0	<2.0.0	show Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

twine

1.13.0

<2.0.0

show

Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

pyup-update-tox-3.13.2-to-3.23.0

1 month, 2 weeks ago

0efa6302

Update tox from 3.13.2 to 3.23.0

pip 19.1.1, Sphinx 2.1.2 and twine 1.13.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
Sphinx	2.1.2	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.
twine	1.13.0	<2.0.0	show Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

Sphinx

2.1.2

<3.0.4

show

Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.

twine

1.13.0

<2.0.0

show

Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

pyup-update-coverage-4.5.4-to-5.5

1 month, 2 weeks ago

3545519e

Update coverage from 4.5.4 to 5.5

pip 19.1.1, Sphinx 2.1.2 and twine 1.13.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
Sphinx	2.1.2	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.
twine	1.13.0	<2.0.0	show Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

Sphinx

2.1.2

<3.0.4

show

Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.

twine

1.13.0

<2.0.0

show

Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

pyup-update-watchdog-0.9.0-to-2.0.2

1 month, 3 weeks ago

7be59283

Update watchdog from 0.9.0 to 2.0.2

pip 19.1.1, Sphinx 2.1.2 and twine 1.13.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
Sphinx	2.1.2	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.
twine	1.13.0	<2.0.0	show Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

Sphinx

2.1.2

<3.0.4

show

Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.

twine

1.13.0

<2.0.0

show

Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

pyup-update-watchdog-0.9.0-to-2.0.1

1 month, 4 weeks ago

d9685a4e

Update watchdog from 0.9.0 to 2.0.1

pip 19.1.1, Sphinx 2.1.2 and twine 1.13.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
Sphinx	2.1.2	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.
twine	1.13.0	<2.0.0	show Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

Sphinx

2.1.2

<3.0.4

show

Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.

twine

1.13.0

<2.0.0

show

Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

pyup-update-sphinx-2.1.2-to-3.5.1

2 months ago

5f88acb2

Update sphinx from 2.1.2 to 3.5.1

pip 19.1.1 and twine 1.13.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
twine	1.13.0	<2.0.0	show Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

twine

1.13.0

<2.0.0

show

Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

pyup-update-tox-3.13.2-to-3.22.0

2 months ago

63337be5

Update tox from 3.13.2 to 3.22.0

pip 19.1.1, Sphinx 2.1.2 and twine 1.13.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
Sphinx	2.1.2	<3.0.4	show Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.
twine	1.13.0	<2.0.0	show Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

Sphinx

2.1.2

<3.0.4

show

Sphinx 3.0.4 updates jQuery version from 3.4.1 to 3.5.1 for security reasons.

twine

1.13.0

<2.0.0

show

Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

pyup-update-sphinx-2.1.2-to-3.5.0

2 months ago

d7f11329

Update sphinx from 2.1.2 to 3.5.0

pip 19.1.1 and twine 1.13.0 have known security vulnerabilities.

Package	Installed	Affected	Info
pip	19.1.1	<19.2	show The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
twine	1.13.0	<2.0.0	show Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).

Package

Installed

Affected

Info

pip

19.1.1

<19.2

show

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

twine

1.13.0

<2.0.0

show

Twine 2.0.0 bumps requests to 2.20 (or later) to avoid reported security vulnerabilities in earlier releases (bug 491).