Safety CI > vertexproject/vtx-base-image

pyup-update-pytest-7.4.3-to-8.2.0

1 year, 5 months ago

Update pytest from 7.4.3 to 8.2.0

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-regex-2024.4.16-to-2024.4.28

1 year, 5 months ago

768e3612

Update regex from 2024.4.16 to 2024.4.28

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-pytest-7.4.3-to-8.1.2

1 year, 5 months ago

f8e20892

Update pytest from 7.4.3 to 8.1.2

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-referencing-0.34.0-to-0.35.0

1 year, 5 months ago

e3266421

Update referencing from 0.34.0 to 0.35.0

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-coverage-7.4.0-to-7.5.0

1 year, 5 months ago

2eca50f3

Update coverage from 7.4.0 to 7.5.0

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

master

1 year, 5 months ago

518a8d18

Update regex from 2023.10.3 to 2024.4.16 (#620)

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

master

1 year, 5 months ago

63d93b1f

Update aiohttp from 3.9.3 to 3.9.5 (#619)

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-pluggy-1.3.0-to-1.5.0

1 year, 5 months ago

0ca0762c

Update pluggy from 1.3.0 to 1.5.0

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-exceptiongroup-1.2.0-to-1.2.1

1 year, 5 months ago

47239717

Update exceptiongroup from 1.2.0 to 1.2.1

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-regex-2023.10.3-to-2024.4.16

1 year, 5 months ago

43ea3841

Update regex from 2023.10.3 to 2024.4.16

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-aiohttp-3.9.3-to-3.9.5

1 year, 5 months ago

38b8bdf0

Update aiohttp from 3.9.3 to 3.9.5

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

master

1 year, 5 months ago

86443cdd

Remove unused pyrsistent library (#618)

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

master

1 year, 5 months ago

2c88d9f6

Update idna from 3.6 to 3.7 (#616)

pyOpenSSL 24.1.0 has known security vulnerabilities.

Package	Installed	Affected	Info

pyup-update-beautifulsoup4-4.12.2-to-4.12.3

1 year, 5 months ago

d866fd77

Merge branch 'master' into pyup-update-beautifulsoup4-4.12.2-to-4.12.3

idna 3.6 and pyOpenSSL 24.1.0 have known security vulnerabilities.

Package	Installed	Affected	Info
idna	3.6	<3.7	show Affected versions of Idna are vulnerable to Denial Of Service via the idna.encode(), where a specially crafted argument could lead to significant resource consumption. In version 3.7, this function has been updated to reject such inputs efficiently, minimizing resource use. A practical workaround involves enforcing a maximum domain name length of 253 characters before encoding, as the vulnerability is triggered by unusually large inputs that normal operations wouldn't encounter.

Package

Installed

Affected

Info

idna

3.6

<3.7

show

Affected versions of Idna are vulnerable to Denial Of Service via the idna.encode(), where a specially crafted argument could lead to significant resource consumption. In version 3.7, this function has been updated to reject such inputs efficiently, minimizing resource use. A practical workaround involves enforcing a maximum domain name length of 253 characters before encoding, as the vulnerability is triggered by unusually large inputs that normal operations wouldn't encounter.

master

1 year, 5 months ago

03c8687e

Update cbor2 from 5.6.2 to 5.6.3 (#615)

idna 3.6 and pyOpenSSL 24.1.0 have known security vulnerabilities.

Package	Installed	Affected	Info
idna	3.6	<3.7	show Affected versions of Idna are vulnerable to Denial Of Service via the idna.encode(), where a specially crafted argument could lead to significant resource consumption. In version 3.7, this function has been updated to reject such inputs efficiently, minimizing resource use. A practical workaround involves enforcing a maximum domain name length of 253 characters before encoding, as the vulnerability is triggered by unusually large inputs that normal operations wouldn't encounter.

Package

Installed

Affected

Info

idna

3.6

<3.7

show

Affected versions of Idna are vulnerable to Denial Of Service via the idna.encode(), where a specially crafted argument could lead to significant resource consumption. In version 3.7, this function has been updated to reject such inputs efficiently, minimizing resource use. A practical workaround involves enforcing a maximum domain name length of 253 characters before encoding, as the vulnerability is triggered by unusually large inputs that normal operations wouldn't encounter.