Safety CI > vertexproject/vtx-base-image

pyup-update-more-itertools-10.1.0-to-10.3.0

1 year, 2 months ago

Update more-itertools from 10.1.0 to 10.3.0

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

master

1 year, 2 months ago

e1297ed7

Update webcolors from 1.13 to 24.6.0 (#653)

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

master

1 year, 2 months ago

2256a08b

Update cbor2 from 5.6.3 to 5.6.4 (#654)

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

master

1 year, 2 months ago

cd00a755

Update beautifulsoup4 from 4.12.2 to 4.12.3 (#561) Co-authored-by: vEpiphyte <epiphyte@vertex.link>

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

master

1 year, 2 months ago

9a6ffcee

Update certifi from 2024.2.2 to 2024.6.2 (#649)

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-prompt-toolkit-3.0.43-to-3.0.47

1 year, 2 months ago

af5a273c

Update prompt-toolkit from 3.0.43 to 3.0.47

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

master

1 year, 2 months ago

c933346d

Update tornado from 6.4 to 6.4.1 (#655)

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-packaging-23.2-to-24.1

1 year, 2 months ago

c771b5e1

Update packaging from 23.2 to 24.1

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-typing-extensions-4.9.0-to-4.12.2

1 year, 2 months ago

084f6f9c

Update typing-extensions from 4.9.0 to 4.12.2

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-tornado-6.4-to-6.4.1

1 year, 2 months ago

1ee6375e

Update tornado from 6.4 to 6.4.1

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-cbor2-5.6.3-to-5.6.4

1 year, 2 months ago

3a9b2cb8

Update cbor2 from 5.6.3 to 5.6.4

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-webcolors-1.13-to-24.6.0

1 year, 2 months ago

2a65ced9

Update webcolors from 1.13 to 24.6.0

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

master

1 year, 2 months ago

3e7318e7

Update urllib3 from 2.1.0 to 2.2.1 (#586) Co-authored-by: vEpiphyte <epiphyte@vertex.link>

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

master

1 year, 2 months ago

f5f7bc3f

Update requests from 2.31.0 to 2.32.3 (#646)

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

master

1 year, 2 months ago

1235f464

Update scalecodec from 1.2.7 to 1.2.9 (#647)

requests 2.31.0 and pyOpenSSL 24.1.0 have known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.31.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.
requests	2.31.0	<2.32.4	show Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

Package

Installed

Affected

Info

requests

2.31.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

requests

2.31.0

<2.32.4

show

Requests is an HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.