Safety CI > toonarmycaptain/dionysus

dependabot/pip/development/matplotlib-3.7.1

2 years, 5 months ago

Bump matplotlib from 3.7.0 to 3.7.1 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

dependabot/pip/development/pytest-7.2.2

2 years, 5 months ago

eba58472

Bump pytest from 7.2.1 to 7.2.2 Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.2.1 to

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

pyup-scheduled-update-2023-03-01

2 years, 5 months ago

02abf6f6

Update mypy from 0.982 to 1.0.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-03-01

2 years, 5 months ago

8a4822e3

Update coverage from 6.5.0 to 7.2.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-03-01

2 years, 5 months ago

b141f824

Update sqlalchemy from 1.4.46 to 2.0.4

No dependencies with known security vulnerabilities.

dependabot/pip/development/coverage-7.2.1

2 years, 5 months ago

a6ce6e0e

Bump coverage from 6.5.0 to 7.2.1 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

development

2 years, 6 months ago

e1006552

Merge pull request #596 from toonarmycaptain/dependabot/pip/development/matplotlib-3.7.0 Bump matpl

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

dependabot/pip/development/matplotlib-3.7.0

2 years, 6 months ago

b571efdd

Bump matplotlib from 3.6.3 to 3.7.0 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

dependabot/pip/development/mypy-1.0.1

2 years, 6 months ago

5f48c01c

Bump mypy from 0.982 to 1.0.1 Bumps [mypy](https://github.com/python/mypy) from 0.982 to 1.0.1. - [

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

snyk-fix-426cfb7b07b45499cedee8212ce38e22

2 years, 6 months ago

b58623f9

fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning

Pillow 9.0.1 and sqlalchemy 1.4.29 have known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	9.0.1	>=2.5.0,<10.0.1	show Pillow 10.0.1 updates its C dependency 'libwebp' to 1.3.2 to include a fix for a high-risk vulnerability. https://pillow.readthedocs.io/en/stable/releasenotes/10.0.1.html
Pillow	9.0.1	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.
Pillow	9.0.1	<9.2.0	show Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
Pillow	9.0.1	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	9.0.1	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	9.0.1	<10.0.0	show Pillow 10.0.0 includes a fix for CVE-2023-44271: Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument. https://github.com/python-pillow/Pillow/pull/7244
sqlalchemy	1.4.29	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

dependabot/pip/development/sqlalchemy-2.0.3

2 years, 6 months ago

d6ad3344

Rm mypy sqlalchemy plugin

No dependencies with known security vulnerabilities.

dependabot/pip/development/sqlalchemy-2.0.3

2 years, 6 months ago

46f25b6d

Rm sqlalchemy types

No dependencies with known security vulnerabilities.

dependabot/pip/development/mypy-1.0.0

2 years, 6 months ago

c132bb89

Bump mypy from 0.982 to 1.0.0 Bumps [mypy](https://github.com/python/mypy) from 0.982 to 1.0.0. - [

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

dependabot/pip/development/sqlalchemy-2.0.3

2 years, 6 months ago

0f01a183

Bump sqlalchemy from 1.4.46 to 2.0.3 Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) f

No dependencies with known security vulnerabilities.

dependabot/pip/development/sqlalchemy-2.0.1

2 years, 6 months ago

6ee341ff

Bump sqlalchemy from 1.4.46 to 2.0.1 Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) f

No dependencies with known security vulnerabilities.