Safety CI > toonarmycaptain/dionysus

dependabot/pip/development/coverage-7.4.4

2 years, 1 month ago

77c499d2

Bump coverage from 6.5.0 to 7.4.4 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

No dependencies with known security vulnerabilities.

dependabot/pip/development/matplotlib-3.8.3

2 years, 1 month ago

d7b59ef5

Bump matplotlib from 3.7.2 to 3.8.3 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

No dependencies with known security vulnerabilities.

development

2 years, 1 month ago

1c81a958

Merge pull request #687 from toonarmycaptain/dependabot/pip/development/mypy-1.9.0 Bump mypy from 1

No dependencies with known security vulnerabilities.

dependabot/pip/development/mypy-1.9.0

2 years, 1 month ago

5bef4b08

Bump mypy from 1.6.1 to 1.9.0 Bumps [mypy](https://github.com/python/mypy) from 1.6.1 to 1.9.0. - [

No dependencies with known security vulnerabilities.

development

2 years, 1 month ago

ae960d83

Merge pull request #686 from toonarmycaptain/dependabot/pip/development/sqlalchemy-2.0.28 Bump sqla

No dependencies with known security vulnerabilities.

dependabot/pip/development/sqlalchemy-2.0.28

2 years, 1 month ago

312032cd

Bump sqlalchemy from 2.0.22 to 2.0.28 Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy)

No dependencies with known security vulnerabilities.

dependabot/pip/development/coverage-7.4.4

2 years, 1 month ago

45b20f83

Bump coverage from 6.5.0 to 7.4.4 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

No dependencies with known security vulnerabilities.

development

2 years, 1 month ago

042ee6e0

Merge pull request #677 from toonarmycaptain/dependabot/pip/pillow-10.2.0 Bump pillow from 10.1.0 t

No dependencies with known security vulnerabilities.

dependabot/pip/pillow-10.2.0

2 years, 1 month ago

e3b2698a

Bump pillow from 10.1.0 to 10.2.0 Bumps [pillow](https://github.com/python-pillow/Pillow) from 10.1

No dependencies with known security vulnerabilities.

development

2 years, 1 month ago

2d9f5c3e

Merge pull request #684 from toonarmycaptain/dependabot/pip/development/pytest-8.1.1 Bump pytest fr

Pillow 10.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.1.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	10.1.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	10.1.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

Package

Installed

Affected

Info

Pillow

10.1.0

<10.2.0

show

Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.

Pillow

10.1.0

<10.2.0

show

Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code.
https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

Pillow

10.1.0

<10.3.0

show

Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

dependabot/pip/development/pytest-8.1.1

2 years, 1 month ago

93480e50

Bump pytest from 7.4.3 to 8.1.1 Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.4.3 to

Pillow 10.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.1.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	10.1.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	10.1.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

Package

Installed

Affected

Info

Pillow

10.1.0

<10.2.0

show

Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.

Pillow

10.1.0

<10.2.0

show

Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code.
https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

Pillow

10.1.0

<10.3.0

show

Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

development

2 years, 1 month ago

80927298

Merge pull request #683 from toonarmycaptain/toonarmycaptain-patch-1 Update CI.yml

Pillow 10.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.1.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	10.1.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	10.1.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

Package

Installed

Affected

Info

Pillow

10.1.0

<10.2.0

show

Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.

Pillow

10.1.0

<10.2.0

show

Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code.
https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

Pillow

10.1.0

<10.3.0

show

Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

toonarmycaptain-patch-1

2 years, 1 month ago

a5af16ba

Add 3.12 release to CI

Pillow 10.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.1.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	10.1.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	10.1.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

Package

Installed

Affected

Info

Pillow

10.1.0

<10.2.0

show

Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.

Pillow

10.1.0

<10.2.0

show

Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code.
https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

Pillow

10.1.0

<10.3.0

show

Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

toonarmycaptain-patch-1

2 years, 1 month ago

62ea2d87

Update CI.yml

Pillow 10.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	10.1.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	10.1.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	10.1.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

Package

Installed

Affected

Info

Pillow

10.1.0

<10.2.0

show

Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.

Pillow

10.1.0

<10.2.0

show

Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code.
https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

Pillow

10.1.0

<10.3.0

show

Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.

pyup-scheduled-update-2024-03-01

2 years, 1 month ago

245d98a7

Update mypy from 1.6.1 to 1.8.0

No dependencies with known security vulnerabilities.