Safety CI > xeor/taggo

master

5 years, 9 months ago

a9ff7d88

Info about windows and symlinks

No dependencies with known security vulnerabilities.

master

5 years, 9 months ago

c15c43f2

Output error message if unable to create symlink

No dependencies with known security vulnerabilities.

master

5 years, 9 months ago

95dc862a

Filtering out invalid windows fs characters

No dependencies with known security vulnerabilities.

master

5 years, 9 months ago

39ed7ea4

Crashed on windows because windows doesnt have a folder with '.'

No dependencies with known security vulnerabilities.

refs/tags/v0.15.0

5 years, 9 months ago

5c799e53

Bump version: 0.14.3 → 0.15.0

No dependencies with known security vulnerabilities.

master

5 years, 11 months ago

1d8bbde1

Merge pull request #12 from wallace11/patch-1 Include metadata in installed packages

No dependencies with known security vulnerabilities.

master

6 years, 2 months ago

80293cd8

Merge pull request #7 from xeor/pyup-update-pyyaml-3.12-to-3.13 Update some deps

No dependencies with known security vulnerabilities.

pyup-update-pyyaml-3.12-to-3.13

6 years, 2 months ago

9a5969fa

Merge branch 'master' into pyup-update-pyyaml-3.12-to-3.13

No dependencies with known security vulnerabilities.

master

6 years, 3 months ago

b69e05d9

Merge pull request #11 from xeor/pyup-update-cryptography-2.1.1-to-2.4.2 Update cryptography to 2.4

No dependencies with known security vulnerabilities.

pyup-update-cryptography-2.1.1-to-2.4.2

6 years, 3 months ago

2cacdf0b

Update cryptography from 2.1.1 to 2.4.2

No dependencies with known security vulnerabilities.

pyup-update-cryptography-2.1.1-to-2.4.1

6 years, 4 months ago

9bf3d564

Update cryptography from 2.1.1 to 2.4.1

No dependencies with known security vulnerabilities.

pyup-update-cryptography-2.1.1-to-2.3.1

6 years, 7 months ago

41aece57

Update cryptography from 2.1.1 to 2.3.1

No dependencies with known security vulnerabilities.

pyup-update-cryptography-2.1.1-to-2.3

6 years, 7 months ago

7f1a8f24

Update cryptography from 2.1.1 to 2.3

PyYAML 3.12 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.12	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466
PyYAML	3.12	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
PyYAML	3.12	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

Package

Installed

Affected

Info

PyYAML

3.12

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

PyYAML

3.12

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

PyYAML

3.12

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

pyup-update-pyyaml-3.12-to-3.13

6 years, 8 months ago

db844d6f

Update pyyaml from 3.12 to 3.13

PyYAML 3.13 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.13	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466
PyYAML	3.13	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
PyYAML	3.13	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

Package

Installed

Affected

Info

PyYAML

3.13

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

PyYAML

3.13

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

PyYAML

3.13

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

refs/tags/v0.14.3

6 years, 11 months ago

fd77ccbe

Bump version: 0.14.2 → 0.14.3

No dependencies with known security vulnerabilities.