Safety CI > toonarmycaptain/dionysus

dependabot/pip/development/mypy-1.7.1

1 year, 11 months ago

6e17d9c9

Bump mypy from 1.6.1 to 1.7.1 Bumps [mypy](https://github.com/python/mypy) from 1.6.1 to 1.7.1. - [

No dependencies with known security vulnerabilities.

dependabot/pip/development/matplotlib-3.8.2

1 year, 11 months ago

ba38e1b0

Bump matplotlib from 3.7.2 to 3.8.2 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

No dependencies with known security vulnerabilities.

dependabot/pip/development/mypy-1.7.0

1 year, 11 months ago

c0fa456c

Bump mypy from 1.6.1 to 1.7.0 Bumps [mypy](https://github.com/python/mypy) from 1.6.1 to 1.7.0. - [

No dependencies with known security vulnerabilities.

dependabot/pip/development/sqlalchemy-2.0.23

1 year, 12 months ago

b23ce87c

Bump sqlalchemy from 2.0.22 to 2.0.23 Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy)

No dependencies with known security vulnerabilities.

dependabot/pip/development/matplotlib-3.8.1

1 year, 12 months ago

38860f73

Bump matplotlib from 3.7.2 to 3.8.1 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

No dependencies with known security vulnerabilities.

snyk-fix-e45732008e2ec41d11da688c006af584

2 years ago

33165892

fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning

Pillow 10.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.0.0	>=2.5.0,<10.0.1	show Pillow 10.0.1 updates its C dependency 'libwebp' to 1.3.2 to include a fix for a high-risk vulnerability. https://pillow.readthedocs.io/en/stable/releasenotes/10.0.1.html
Pillow	10.0.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.
Pillow	10.0.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	10.0.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.

pyup-scheduled-update-2023-11-01

2 years ago

e90c5b7f

Update coverage from 6.5.0 to 7.3.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-11-01

2 years ago

3893744a

Update matplotlib from 3.7.2 to 3.8.1

No dependencies with known security vulnerabilities.

dependabot/pip/development/coverage-7.3.2

2 years ago

fc6a4445

Bump coverage from 6.5.0 to 7.3.2 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

No dependencies with known security vulnerabilities.

development

2 years ago

3e6a650b

Merge pull request #657 from toonarmycaptain/dependabot/pip/development/pytest-7.4.3 Bump pytest fr

No dependencies with known security vulnerabilities.

dependabot/pip/development/pytest-7.4.3

2 years ago

a3fa36f8

Bump pytest from 7.4.2 to 7.4.3 Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.4.2 to

No dependencies with known security vulnerabilities.

dependabot/pip/development/coverage-7.3.2

2 years ago

40e80e7c

Bump coverage from 6.5.0 to 7.3.2 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

No dependencies with known security vulnerabilities.

development

2 years ago

f05d791d

Merge pull request #656 from toonarmycaptain/dependabot/pip/development/mypy-1.6.1 Bump mypy from 1

No dependencies with known security vulnerabilities.

dependabot/pip/development/mypy-1.6.1

2 years ago

253d2b58

Bump mypy from 1.6.0 to 1.6.1 Bumps [mypy](https://github.com/python/mypy) from 1.6.0 to 1.6.1. - [

No dependencies with known security vulnerabilities.

dependabot/pip/development/matplotlib-3.8.0

2 years ago

6b9ccb7b

Bump matplotlib from 3.7.2 to 3.8.0 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

No dependencies with known security vulnerabilities.