Safety CI > toonarmycaptain/dionysus

development

2 years ago

8c955a83

Merge pull request #653 from toonarmycaptain/dependabot/pip/development/sqlalchemy-2.0.22 Bump sqla

No dependencies with known security vulnerabilities.

dependabot/pip/development/sqlalchemy-2.0.22

2 years ago

b652f9a2

Bump sqlalchemy from 2.0.20 to 2.0.22 Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy)

No dependencies with known security vulnerabilities.

development

2 years ago

3ca9c96d

Merge pull request #654 from toonarmycaptain/dependabot/pip/development/mypy-1.6.0 Bump mypy from 1

No dependencies with known security vulnerabilities.

dependabot/pip/development/coverage-7.3.2

2 years ago

291c712c

Bump coverage from 6.5.0 to 7.3.2 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

No dependencies with known security vulnerabilities.

dependabot/pip/development/matplotlib-3.8.0

2 years ago

c826ba0d

Bump matplotlib from 3.7.2 to 3.8.0 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

No dependencies with known security vulnerabilities.

development

2 years ago

94704185

Merge pull request #655 from toonarmycaptain/dependabot/pip/development/pillow-10.1.0 Bump pillow f

No dependencies with known security vulnerabilities.

dependabot/pip/development/pillow-10.1.0

2 years ago

311f0872

Bump pillow from 10.0.1 to 10.1.0 Bumps [pillow](https://github.com/python-pillow/Pillow) from 10.0

No dependencies with known security vulnerabilities.

dependabot/pip/development/mypy-1.6.0

2 years ago

18e711a8

Bump mypy from 1.5.1 to 1.6.0 Bumps [mypy](https://github.com/python/mypy) from 1.5.1 to 1.6.0. - [

No dependencies with known security vulnerabilities.

dependabot/pip/development/sqlalchemy-2.0.22

2 years ago

bdd94048

Bump sqlalchemy from 2.0.20 to 2.0.22 Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy)

No dependencies with known security vulnerabilities.

dependabot/pip/development/matplotlib-3.8.0

2 years, 1 month ago

ce61d926

Bump matplotlib from 3.7.2 to 3.8.0 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

No dependencies with known security vulnerabilities.

update-sqlalchemy-2-0-21

2 years, 1 month ago

6e78f86a

Merge branch 'development' into update-sqlalchemy-2-0-21

No dependencies with known security vulnerabilities.

dependabot/pip/development/sqlalchemy-2.0.21

2 years, 1 month ago

7db473bd

Bump sqlalchemy from 2.0.20 to 2.0.21 Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy)

No dependencies with known security vulnerabilities.

dependabot/pip/development/matplotlib-3.8.0

2 years, 1 month ago

b95ec938

Bump matplotlib from 3.7.2 to 3.8.0 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

No dependencies with known security vulnerabilities.

development

2 years, 1 month ago

4d119ea1

Merge pull request #650 from toonarmycaptain/update-pillow-10-0-1-1 Update pillow

No dependencies with known security vulnerabilities.

dependabot/pip/development/coverage-7.3.2

2 years, 1 month ago

f9c733ea

Bump coverage from 6.5.0 to 7.3.2 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

Pillow 10.0.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.0.0	>=2.5.0,<10.0.1	show Pillow 10.0.1 updates its C dependency 'libwebp' to 1.3.2 to include a fix for a high-risk vulnerability. https://pillow.readthedocs.io/en/stable/releasenotes/10.0.1.html
Pillow	10.0.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.
Pillow	10.0.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	10.0.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.