Safety CI > toonarmycaptain/dionysus

development

11 months ago

db573d97

Update CHANGELOG.md

No dependencies with known security vulnerabilities.

snyk-fix-c1e2a143cf574ffda2b46a94065886ec

11 months ago

472efe70

fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning

No dependencies with known security vulnerabilities.

snyk-fix-032502fe7d246fbbbfa27efd0c01e2f0

11 months ago

2c198b43

fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning

Pillow 9.5.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	9.5.0	>=2.5.0,<10.0.1	show Pillow 10.0.1 updates its C dependency 'libwebp' to 1.3.2 to include a fix for a high-risk vulnerability. https://pillow.readthedocs.io/en/stable/releasenotes/10.0.1.html
Pillow	9.5.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	9.5.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.
Pillow	9.5.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	9.5.0	<10.0.0	show Pillow 10.0.0 includes a fix for CVE-2023-44271: Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument. https://github.com/python-pillow/Pillow/pull/7244

snyk-fix-86b6b3e73766745c6d8849ecb99cc7b8

11 months ago

43ea1f23

fix: requirements_dev.txt to reduce vulnerabilities The following vulnerabilities are fixed by pin

No dependencies with known security vulnerabilities.

snyk-fix-d97de0c426f8a5a3201ecda5ca080d16

11 months ago

870ab750

fix: requirements_dev.txt to reduce vulnerabilities The following vulnerabilities are fixed by pin

Pillow 9.5.0 has known security vulnerabilities.

Package	Installed	Affected	Info
Pillow	9.5.0	>=2.5.0,<10.0.1	show Pillow 10.0.1 updates its C dependency 'libwebp' to 1.3.2 to include a fix for a high-risk vulnerability. https://pillow.readthedocs.io/en/stable/releasenotes/10.0.1.html
Pillow	9.5.0	<10.2.0	show Pillow is potentially vulnerable to DoS attacks through PIL.ImageFont.ImageFont.getmask(). A decompression bomb check has also been added to the affected function.
Pillow	9.5.0	<10.3.0	show Pillow 10.3.0 introduces a security update addressing CVE-2024-28219 by replacing certain functions with strncpy to prevent buffer overflow issues.
Pillow	9.5.0	<10.2.0	show Pillow is affected by an arbitrary code execution vulnerability. If an attacker has control over the keys passed to the environment argument of PIL.ImageMath.eval(), they may be able to execute arbitrary code. https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Pillow	9.5.0	<10.0.0	show Pillow 10.0.0 includes a fix for CVE-2023-44271: Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument. https://github.com/python-pillow/Pillow/pull/7244

development

11 months ago

f80ab924

Merge pull request #712 from toonarmycaptain/dependabot/pip/development/coverage-7.5.4 Bump coverag

No dependencies with known security vulnerabilities.

development

11 months ago

3d81aa42

Merge pull request #718 from toonarmycaptain/dependabot/pip/development/matplotlib-3.9.1 Bump matpl

No dependencies with known security vulnerabilities.

dependabot/pip/development/coverage-7.5.4

11 months ago

4ad060b7

Bump coverage from 6.5.0 to 7.5.4 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

No dependencies with known security vulnerabilities.

development

11 months ago

ad80db4b

Merge pull request #714 from toonarmycaptain/dependabot/pip/development/mypy-1.10.1 Bump mypy from

No dependencies with known security vulnerabilities.

dependabot/pip/development/matplotlib-3.9.1

11 months ago

77b70de1

Bump matplotlib from 3.9.0 to 3.9.1 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

No dependencies with known security vulnerabilities.

development

11 months ago

7d36a369

Merge pull request #713 from toonarmycaptain/dependabot/pip/development/sqlalchemy-2.0.31 Bump sqla

No dependencies with known security vulnerabilities.

dependabot/pip/development/matplotlib-3.9.1

11 months ago

78aaa2b8

Bump matplotlib from 3.9.0 to 3.9.1 Bumps [matplotlib](https://github.com/matplotlib/matplotlib) fr

No dependencies with known security vulnerabilities.

dependabot/pip/development/coverage-7.5.4

11 months ago

d8a7b81d

Bump coverage from 6.5.0 to 7.5.4 Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.5.0

No dependencies with known security vulnerabilities.

dependabot/pip/development/mypy-1.10.1

11 months ago

9fd89735

Bump mypy from 1.10.0 to 1.10.1 Bumps [mypy](https://github.com/python/mypy) from 1.10.0 to 1.10.1.

No dependencies with known security vulnerabilities.

dependabot/pip/development/sqlalchemy-2.0.31

11 months ago

b1d17a48

Bump sqlalchemy from 2.0.30 to 2.0.31 Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy)

No dependencies with known security vulnerabilities.