Safety CI > wherculano/libpythonpro-2020

pyup-update-requests-2.25.0-to-2.25.1

5 years, 3 months ago

811c60f7

Update requests from 2.25.0 to 2.25.1

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-pytest-mock-3.3.1-to-3.4.0

5 years, 3 months ago

067e0b7d

Update pytest-mock from 3.3.1 to 3.4.0

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-pytest-6.1.2-to-6.2.0

5 years, 3 months ago

aedee681

Update pytest from 6.1.2 to 6.2.0

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-py-1.9.0-to-1.10.0

5 years, 4 months ago

78d12c30

Update py from 1.9.0 to 1.10.0

No dependencies with known security vulnerabilities.

pyup-update-packaging-20.4-to-20.8

5 years, 4 months ago

af4e5124

Update packaging from 20.4 to 20.8

py 1.9.0 has known security vulnerabilities.

Package	Installed	Affected	Info
py	1.9.0	<=1.11.0	show DISPUTED Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled. https://github.com/pytest-dev/py/issues/287
py	1.9.0	<=1.9.0	show Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

Package

Installed

Affected

Info

py

1.9.0

<=1.11.0

show

** DISPUTED ** Py throughout 1.11.0 allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data because the InfoSvnCommand argument is mishandled.
https://github.com/pytest-dev/py/issues/287

py

1.9.0

<=1.9.0

show

Py 1.10.0 includes a fix for CVE-2020-29651: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

pyup-update-chardet-3.0.4-to-4.0.0

5 years, 4 months ago

01826ecb

Update chardet from 3.0.4 to 4.0.0

No dependencies with known security vulnerabilities.

pyup-update-packaging-20.4-to-20.7

5 years, 4 months ago

b0ebfcbd

Update packaging from 20.4 to 20.7

No dependencies with known security vulnerabilities.

pyup-update-iniconfig-1.0.1-to-1.1.1

5 years, 4 months ago

844a2847

Update iniconfig from 1.0.1 to 1.1.1

No dependencies with known security vulnerabilities.

pyup-update-certifi-2020.11.8-to-2020.12.5

5 years, 4 months ago

db2a8b33

Update certifi from 2020.11.8 to 2020.12.5

No dependencies with known security vulnerabilities.

pyup-update-certifi-2020.11.8-to-2020.12.5

5 years, 4 months ago

cfde4f34

Update certifi from 2020.11.8 to 2020.12.5

No dependencies with known security vulnerabilities.

pyup-update-packaging-20.4-to-20.7

5 years, 4 months ago

51424f3a

Update packaging from 20.4 to 20.7

No dependencies with known security vulnerabilities.

pyup-update-packaging-20.4-to-20.5

5 years, 4 months ago

3ac1796d

Update packaging from 20.4 to 20.5

No dependencies with known security vulnerabilities.

pyup-update-iniconfig-1.0.1-to-1.1.1

5 years, 4 months ago

21480b95

Update iniconfig from 1.0.1 to 1.1.1

No dependencies with known security vulnerabilities.

pyup-update-iniconfig-1.0.1-to-1.1.1

5 years, 4 months ago

02ac46d2

Update iniconfig from 1.0.1 to 1.1.1

No dependencies with known security vulnerabilities.

master

5 years, 4 months ago

14c2ca9a

Update flake8 from 3.8.3 to 3.8.4

No dependencies with known security vulnerabilities.