Safety CI > vilkasgroup/Verifone

dependabot/pip/certifi-2023.7.22

1 year, 9 months ago

3e5ddc12

Bump certifi from 2022.12.7 to 2023.7.22 Bumps [certifi](https://github.com/certifi/python-certifi)

No dependencies with known security vulnerabilities.

master

1 year, 9 months ago

beabf0e3

Update sphinx from 6.2.1 to 7.1.0 (#399)

No dependencies with known security vulnerabilities.

pyup-update-sphinx-6.2.1-to-7.1.0

1 year, 9 months ago

87791da5

Update sphinx from 6.2.1 to 7.1.0

No dependencies with known security vulnerabilities.

master

1 year, 9 months ago

bbc33468

Update wheel from 0.40.0 to 0.41.0 (#398)

No dependencies with known security vulnerabilities.

pyup-update-wheel-0.40.0-to-0.41.0

1 year, 9 months ago

fe3f390a

Update wheel from 0.40.0 to 0.41.0

No dependencies with known security vulnerabilities.

master

1 year, 9 months ago

212afc54

Update pyyaml from 6.0 to 6.0.1 (#397)

No dependencies with known security vulnerabilities.

pyup-update-pyyaml-6.0-to-6.0.1

1 year, 9 months ago

9a313847

Update pyyaml from 6.0 to 6.0.1

No dependencies with known security vulnerabilities.

master

1 year, 9 months ago

b7e6b9a2

Update tox from 4.6.3 to 4.6.4 (#396)

No dependencies with known security vulnerabilities.

pyup-update-tox-4.6.3-to-4.6.4

1 year, 9 months ago

f54eff57

Update tox from 4.6.3 to 4.6.4

No dependencies with known security vulnerabilities.

master

1 year, 9 months ago

029591f8

Update pycryptodome from 3.17 to 3.18.0 (#388)

No dependencies with known security vulnerabilities.

master

1 year, 9 months ago

e65af514

Update requests from 2.29.0 to 2.31.0 (#389)

No dependencies with known security vulnerabilities.

master

1 year, 10 months ago

7a988ea5

Update tox from 4.6.2 to 4.6.3 (#395)

requests 2.29.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.29.0	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.
requests	2.29.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

Package

Installed

Affected

Info

requests

2.29.0

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

requests

2.29.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

pyup-update-tox-4.6.2-to-4.6.3

1 year, 10 months ago

ffea0e5f

Update tox from 4.6.2 to 4.6.3

requests 2.29.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.29.0	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.
requests	2.29.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

Package

Installed

Affected

Info

requests

2.29.0

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

requests

2.29.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

master

1 year, 10 months ago

290bd4bb

Update tox from 4.6.0 to 4.6.2 (#394)

requests 2.29.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.29.0	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.
requests	2.29.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

Package

Installed

Affected

Info

requests

2.29.0

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

requests

2.29.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

pyup-update-tox-4.6.0-to-4.6.2

1 year, 10 months ago

04113220

Update tox from 4.6.0 to 4.6.2

requests 2.29.0 has known security vulnerabilities.

Package	Installed	Affected	Info
requests	2.29.0	>=2.3.0,<2.31.0	show Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.
requests	2.29.0	<2.32.2	show Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.

Package

Installed

Affected

Info

requests

2.29.0

>=2.3.0,<2.31.0

show

Affected versions of Requests are vulnerable to proxy credential leakage. When redirected to an HTTPS endpoint, the Proxy-Authorization header is forwarded to the destination server due to the use of rebuild_proxies to reattach the header. This may allow a malicious actor to exfiltrate sensitive information.

requests

2.29.0

<2.32.2

show

Affected versions of Requests, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. Requests 2.32.0 fixes the issue, but versions 2.32.0 and 2.32.1 were yanked due to conflicts with CVE-2024-35195 mitigation.