Safety CI > toonarmycaptain/dionysus

dependabot/pip/development/mypy-1.10.0

1 year, 3 months ago

Bump mypy from 1.9.0 to 1.10.0 Bumps [mypy](https://github.com/python/mypy) from 1.9.0 to 1.10.0. -

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

development

1 year, 3 months ago

57fe52e7

Merge pull request #698 from toonarmycaptain/dependabot/pip/development/pytest-8.2.0 Bump pytest fr

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

dependabot/pip/development/pytest-8.2.0

1 year, 3 months ago

3e45cc50

Bump pytest from 8.1.1 to 8.2.0 Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.1.1 to

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

dependabot/pip/development/mypy-1.10.0

1 year, 3 months ago

275b4ccf

Bump mypy from 1.9.0 to 1.10.0 Bumps [mypy](https://github.com/python/mypy) from 1.9.0 to 1.10.0. -

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

dependabot/pip/development/coverage-7.5.0

1 year, 3 months ago

562224ec

Bump coverage from 6.5.0 to 7.5.0 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

dependabot/pip/development/matplotlib-3.8.4

1 year, 4 months ago

91edf5d8

Bump matplotlib from 3.7.2 to 3.8.4 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

dependabot/pip/development/pillow-10.3.0

1 year, 4 months ago

8c1b1a63

Bump pillow from 10.2.0 to 10.3.0 Bumps [pillow](https://github.com/python-pillow/Pillow) from 10.2