cobra

cobra copied to clipboard

Bumps [loader-utils](https://github.com/webpack/loader-utils) from 1.4.0 to 1.4.2. Release notes Sourced from loader-utils's releases. v1.4.2 1.4.2 (2022-11-11) Bug Fixes ReDoS problem (#226) (17cbf8f) v1.4.1 1.4.1 (2022-11-07) Bug Fixes security problem (#220) (4504e34)...

dependabot[bot]

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) Commits See full diff in compare...

dependabot[bot]

Bumps [codecov](https://github.com/codecov/codecov-python) from 2.0.15 to 2.0.16. Changelog Sourced from codecov's changelog. 2.0.16 fixed reported command injection vulnerability. Commits 3a8b06b Version 2.0.16 b2951c0 Merge pull request #231 from codecov/ce-1380 2a80aa4 CE-1380_sanitize_args...

dependabot[bot]

Bumps [shell-quote](https://github.com/substack/node-shell-quote) from 1.7.2 to 1.7.3. Changelog Sourced from shell-quote's changelog. 1.7.3 Fix a security issue where the regex for windows drive letters allowed some shell meta-characters to escape the...

dependabot[bot]

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

SELECT returns an empty object when a field is missing because extractAttributeFromDict defaults the subtree to an empty dict instead of None. https://github.com/machinezone/cobra/blob/8c9d8b6d3da7264dcc70bd25e430306e5f4a1640/cobras/common/algorithm.py#L22-L26

abursavich

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.3.2 to 41.0.3. Changelog Sourced from cryptography's changelog. 41.0.3 - 2023-08-01 * Fixed performance regression loading DH public keys. * Fixed a memory leak when using :class:`~cryptography.hazmat.primitives.ciphers.aead.ChaCha20Poly1305`....

dependabot[bot]

Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4. Release notes Sourced from word-wrap's releases. 1.2.4 What's Changed Remove default indent by @​mohd-akram in jonschlinkert/word-wrap#24 🔒fix: CVE 2023 26115 (2) by @​OlafConijn in...

dependabot[bot]

Bumps [ansi-regex](https://github.com/chalk/ansi-regex) and [ansi-regex](https://github.com/chalk/ansi-regex). These dependencies needed to be updated together. Updates `ansi-regex` from 5.0.0 to 5.0.1 Release notes Sourced from ansi-regex's releases. v5.0.1 Fixes (backport of 6.0.1 to v5)...

dependabot[bot]

Reporting a vulnerability

1

Hello! I hope you are doing well! We are a security research team. Our tool automatically detected a vulnerability in this repository. We want to disclose it responsibly. GitHub has...

igibek