Safety CI > toonarmycaptain/dionysus

dependabot/pip/development/matplotlib-3.8.4

1 year, 11 months ago

Bump matplotlib from 3.7.2 to 3.8.4 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

development

1 year, 11 months ago

eebc8733

Merge pull request #701 from toonarmycaptain/dependabot/pip/development/sqlalchemy-2.0.30 Bump sqla

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

dependabot/pip/development/coveralls-4.0.0

1 year, 11 months ago

142a1e49

Bump coveralls from 3.3.1 to 4.0.0 Bumps [coveralls](https://github.com/TheKevJames/coveralls-pytho

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

dependabot/pip/development/sqlalchemy-2.0.30

1 year, 11 months ago

7d954f17

Bump sqlalchemy from 2.0.29 to 2.0.30 Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy)

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

dependabot/pip/development/coverage-7.5.1

1 year, 11 months ago

10eb5393

Bump coverage from 6.5.0 to 7.5.1 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

pyup-scheduled-update-2024-05-01

1 year, 11 months ago

d8f14cb4

Update coveralls from 3.3.1 to 4.0.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-05-01

1 year, 11 months ago

3d17914f

Update coverage from 6.5.0 to 7.5.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-05-01

1 year, 11 months ago

f301c973

Update pillow from 10.2.0 to 10.3.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2024-05-01

1 year, 11 months ago

f7055043

Update matplotlib from 3.7.2 to 3.8.4

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

dependabot/pip/development/coverage-7.5.0

1 year, 11 months ago

bd7cc489

Bump coverage from 6.5.0 to 7.5.0 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

development

1 year, 11 months ago

5f5e98ee

Merge pull request #697 from toonarmycaptain/dependabot/pip/development/mypy-1.10.0 Bump mypy from

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

dependabot/pip/development/coverage-7.5.0

1 year, 11 months ago

f424cf10

Bump coverage from 6.5.0 to 7.5.0 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

dependabot/pip/development/mypy-1.10.0

1 year, 11 months ago

6ccb66e3

Bump mypy from 1.9.0 to 1.10.0 Bumps [mypy](https://github.com/python/mypy) from 1.9.0 to 1.10.0. -

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

development

1 year, 11 months ago

57fe52e7

Merge pull request #698 from toonarmycaptain/dependabot/pip/development/pytest-8.2.0 Bump pytest fr

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

dependabot/pip/development/pytest-8.2.0

1 year, 11 months ago

3e45cc50

Bump pytest from 8.1.1 to 8.2.0 Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.1.1 to

Pillow 10.2.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.2.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.