Safety CI > umeboshi2/netinstauto

pyup-update-pytest-3.7.2-to-3.7.3

7 years, 9 months ago

2c43b417

Update pytest from 3.7.2 to 3.7.3

No dependencies with known security vulnerabilities.

master

7 years, 9 months ago

8eda16ec

Merge pull request #10 from umeboshi2/pyup-update-sphinx-1.7.6-to-1.7.7 Update sphinx to 1.7.7

No dependencies with known security vulnerabilities.

pyup-update-sphinx-1.7.6-to-1.7.7

7 years, 9 months ago

6e374e81

Update sphinx from 1.7.6 to 1.7.7

No dependencies with known security vulnerabilities.

master

7 years, 9 months ago

3e2b34b4

Merge pull request #9 from umeboshi2/pyup-update-pytest-3.7.1-to-3.7.2 Update pytest to 3.7.2

No dependencies with known security vulnerabilities.

pyup-update-pytest-3.7.1-to-3.7.2

7 years, 9 months ago

958092be

Update pytest from 3.7.1 to 3.7.2

No dependencies with known security vulnerabilities.

master

7 years, 10 months ago

3ef370c3

Merge pull request #8 from umeboshi2/pyup-update-tox-3.1.3-to-3.2.1 Update tox to 3.2.1

No dependencies with known security vulnerabilities.

pyup-update-tox-3.1.3-to-3.2.1

7 years, 10 months ago

3812fdd6

Update tox from 3.1.3 to 3.2.1

No dependencies with known security vulnerabilities.

master

7 years, 10 months ago

599ac70c

Merge pull request #7 from umeboshi2/pyup-update-tox-3.1.2-to-3.1.3 Update tox to 3.1.3

No dependencies with known security vulnerabilities.

pyup-update-tox-3.1.2-to-3.1.3

7 years, 10 months ago

f42601f8

Update tox from 3.1.2 to 3.1.3

No dependencies with known security vulnerabilities.

master

7 years, 10 months ago

9f95a65d

Merge pull request #6 from umeboshi2/pyup-update-pytest-3.7.0-to-3.7.1 Update pytest to 3.7.1

No dependencies with known security vulnerabilities.

pyup-update-pytest-3.7.0-to-3.7.1

7 years, 10 months ago

357b0eec

Update pytest from 3.7.0 to 3.7.1

No dependencies with known security vulnerabilities.

master

7 years, 10 months ago

2c0b0d1f

Merge pull request #5 from umeboshi2/pyup-update-pytest-3.6.4-to-3.7.0 Update pytest to 3.7.0

No dependencies with known security vulnerabilities.

master

7 years, 10 months ago

89e5cf1f

Merge branch 'master' of github.com:umeboshi2/netinstauto

PyYAML 3.13 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.13	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.13	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.13

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.13

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

master

7 years, 10 months ago

c2b3251d

Merge pull request #4 from umeboshi2/pyup-update-pytest-3.6.3-to-3.6.4 Update pytest to 3.6.4

PyYAML 3.13 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.13	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.13	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.13

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.13

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

pyup-update-pytest-3.6.3-to-3.6.4

7 years, 10 months ago

fb6ccc52

Update pytest from 3.6.3 to 3.6.4

PyYAML 3.13 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.13	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.
PyYAML	3.13	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Package

Installed

Affected

Info

PyYAML

3.13

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

PyYAML

3.13

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.