Safety CI > toonarmycaptain/dionysus

toonarmycaptain-patch-1

1 year, 5 months ago

a5af16ba

Add 3.12 release to CI

Pillow 10.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.1.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.
Pillow	10.1.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	10.1.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

Package

Installed

Affected

Info

Pillow

10.1.0

<10.3.0

show

Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

Pillow

10.1.0

<10.2.0

show

Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.

Pillow

10.1.0

<10.2.0

show

Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code.
https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

toonarmycaptain-patch-1

1 year, 5 months ago

62ea2d87

Update CI.yml

Pillow 10.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.1.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.
Pillow	10.1.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	10.1.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

Package

Installed

Affected

Info

Pillow

10.1.0

<10.3.0

show

Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

Pillow

10.1.0

<10.2.0

show

Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.

Pillow

10.1.0

<10.2.0

show

Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code.
https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

pyup-scheduled-update-2024-03-01

1 year, 5 months ago

245d98a7

Update mypy from 1.6.1 to 1.8.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-03-01

1 year, 5 months ago

15a4e6e1

Update sqlalchemy from 2.0.22 to 2.0.27

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-03-01

1 year, 5 months ago

82cf8551

Update coverage from 6.5.0 to 7.4.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-03-01

1 year, 5 months ago

13e995e1

Update pytest from 7.4.3 to 8.0.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-03-01

1 year, 5 months ago

5ea76cac

Update matplotlib from 3.7.2 to 3.8.3

Pillow 10.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.1.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.
Pillow	10.1.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	10.1.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

Package

Installed

Affected

Info

Pillow

10.1.0

<10.3.0

show

Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

Pillow

10.1.0

<10.2.0

show

Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.

Pillow

10.1.0

<10.2.0

show

Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code.
https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

pyup-scheduled-update-2024-03-01

1 year, 5 months ago

0df34778

Update pillow from 10.1.0 to 10.2.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-02-01

1 year, 6 months ago

ceb35c1c

Update pytest from 7.4.3 to 8.0.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-02-01

1 year, 6 months ago

38b244ad

Update mypy from 1.6.1 to 1.8.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-02-01

1 year, 6 months ago

e1f91d83

Update coverage from 6.5.0 to 7.4.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-02-01

1 year, 6 months ago

a698a6a6

Update pillow from 10.1.0 to 10.2.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-02-01

1 year, 6 months ago

2a1c34d4

Update sqlalchemy from 2.0.22 to 2.0.25

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-02-01

1 year, 6 months ago

e4285978

Update matplotlib from 3.7.2 to 3.8.2

Pillow 10.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.1.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.
Pillow	10.1.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	10.1.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

Package

Installed

Affected

Info

Pillow

10.1.0

<10.3.0

show

Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

Pillow

10.1.0

<10.2.0

show

Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.

Pillow

10.1.0

<10.2.0

show

Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code.
https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

snyk-fix-ee12707ac7b00376a2afb6190597dde6

1 year, 6 months ago

2d386843

fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning

No dependencies with known security vulnerabilities.