Safety CI > toonarmycaptain/dionysus

dependabot/pip/development/mypy-1.0.1

2 years, 8 months ago

Bump mypy from 0.982 to 1.0.1 Bumps [mypy](https://github.com/python/mypy) from 0.982 to 1.0.1. - [

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

snyk-fix-426cfb7b07b45499cedee8212ce38e22

2 years, 8 months ago

b58623f9

fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning

Pillow 9.0.1 and sqlalchemy 1.4.29 have known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	9.0.1	>=2.5.0,<10.0.1	show Pillow 10.0.1 updates its C dependency 'libwebp' to 1.3.2 to include a fix for a high-risk vulnerability. https://pillow.readthedocs.io/en/stable/releasenotes/10.0.1.html
Pillow	9.0.1	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.
Pillow	9.0.1	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	9.0.1	<10.0.0	show Pillow 10.0.0 includes a fix for CVE-2023-44271: Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument. https://github.com/python-pillow/Pillow/pull/7244
Pillow	9.0.1	<9.2.0	show Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
Pillow	9.0.1	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
sqlalchemy	1.4.29	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

dependabot/pip/development/sqlalchemy-2.0.3

2 years, 8 months ago

d6ad3344

Rm mypy sqlalchemy plugin

No dependencies with known security vulnerabilities.

dependabot/pip/development/sqlalchemy-2.0.3

2 years, 8 months ago

46f25b6d

Rm sqlalchemy types

No dependencies with known security vulnerabilities.

dependabot/pip/development/mypy-1.0.0

2 years, 8 months ago

c132bb89

Bump mypy from 0.982 to 1.0.0 Bumps [mypy](https://github.com/python/mypy) from 0.982 to 1.0.0. - [

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

dependabot/pip/development/sqlalchemy-2.0.3

2 years, 8 months ago

0f01a183

Bump sqlalchemy from 1.4.46 to 2.0.3 Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) f

No dependencies with known security vulnerabilities.

dependabot/pip/development/sqlalchemy-2.0.1

2 years, 9 months ago

6ee341ff

Bump sqlalchemy from 1.4.46 to 2.0.1 Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) f

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 9 months ago

3e7ad80a

Update coverage from 6.5.0 to 7.1.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 9 months ago

a4222982

Update mypy from 0.982 to 0.991

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

2 years, 9 months ago

3059059d

Update sqlalchemy from 1.4.46 to 2.0.1

No dependencies with known security vulnerabilities.

toonarmycaptain-rm-39

2 years, 9 months ago

a5c3ce75

RM unused Travis/CircleCI badges.

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

toonarmycaptain-rm-39

2 years, 9 months ago

2f30d5e1

Rm CircleCI Maintaining this CI is more work than desired.

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

toonarmycaptain-rm-39

2 years, 9 months ago

2271cd8b

Rm 3.9, add 3.11 CircleCI

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

toonarmycaptain-rm-39

2 years, 9 months ago

46ed733c

Rm 3.9, add 3.11 README.md

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

toonarmycaptain-rm-39

2 years, 9 months ago

641642cc

Rm 3.9, add 3.11 appveyor

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563