Safety CI > toonarmycaptain/dionysus

pyup-scheduled-update-2023-03-01

3 years, 1 month ago

8a4822e3

Update coverage from 6.5.0 to 7.2.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-03-01

3 years, 1 month ago

b141f824

Update sqlalchemy from 1.4.46 to 2.0.4

No dependencies with known security vulnerabilities.

dependabot/pip/development/coverage-7.2.1

3 years, 1 month ago

a6ce6e0e

Bump coverage from 6.5.0 to 7.2.1 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

development

3 years, 1 month ago

e1006552

Merge pull request #596 from toonarmycaptain/dependabot/pip/development/matplotlib-3.7.0 Bump matpl

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

dependabot/pip/development/matplotlib-3.7.0

3 years, 1 month ago

b571efdd

Bump matplotlib from 3.6.3 to 3.7.0 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

dependabot/pip/development/mypy-1.0.1

3 years, 1 month ago

5f48c01c

Bump mypy from 0.982 to 1.0.1 Bumps [mypy](https://github.com/python/mypy) from 0.982 to 1.0.1. - [

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

snyk-fix-426cfb7b07b45499cedee8212ce38e22

3 years, 1 month ago

b58623f9

fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning

Pillow 9.0.1 and sqlalchemy 1.4.29 have known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	9.0.1	<9.2.0	show Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
Pillow	9.0.1	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	9.0.1	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	9.0.1	<10.0.0	show Pillow 10.0.0 includes a fix for CVE-2023-44271: Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument. https://github.com/python-pillow/Pillow/pull/7244
Pillow	9.0.1	>=2.5.0,<10.0.1	show Pillow 10.0.1 updates its C dependency 'libwebp' to 1.3.2 to include a fix for a high-risk vulnerability. https://pillow.readthedocs.io/en/stable/releasenotes/10.0.1.html
Pillow	9.0.1	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.
sqlalchemy	1.4.29	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

dependabot/pip/development/sqlalchemy-2.0.3

3 years, 2 months ago

d6ad3344

Rm mypy sqlalchemy plugin

No dependencies with known security vulnerabilities.

dependabot/pip/development/sqlalchemy-2.0.3

3 years, 2 months ago

46f25b6d

Rm sqlalchemy types

No dependencies with known security vulnerabilities.

dependabot/pip/development/mypy-1.0.0

3 years, 2 months ago

c132bb89

Bump mypy from 0.982 to 1.0.0 Bumps [mypy](https://github.com/python/mypy) from 0.982 to 1.0.0. - [

sqlalchemy 1.4.46 has known security vulnerabilities.

Package	Installed	Affected	Info
sqlalchemy	1.4.46	<2.0.0b1	show Sqlalchemy 2.0.0b1 avoids leaking cleartext passwords to the open for careless uses of str(engine.URL()) in logs and prints. https://github.com/sqlalchemy/sqlalchemy/pull/8563

dependabot/pip/development/sqlalchemy-2.0.3

3 years, 2 months ago

0f01a183

Bump sqlalchemy from 1.4.46 to 2.0.3 Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) f

No dependencies with known security vulnerabilities.

dependabot/pip/development/sqlalchemy-2.0.1

3 years, 2 months ago

6ee341ff

Bump sqlalchemy from 1.4.46 to 2.0.1 Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) f

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

3 years, 2 months ago

3e7ad80a

Update coverage from 6.5.0 to 7.1.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

3 years, 2 months ago

a4222982

Update mypy from 0.982 to 0.991

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2023-02-01

3 years, 2 months ago

3059059d

Update sqlalchemy from 1.4.46 to 2.0.1

No dependencies with known security vulnerabilities.