From f53da8bd4e5bd5b2e71edcac66174f9e0c802cf4 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: 2021年12月15日 00:30:06 +0000 Subject: [PATCH 1/8] fix: Amazon-Price-Alert/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-LXML-2316995 --- Amazon-Price-Alert/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Amazon-Price-Alert/requirements.txt b/Amazon-Price-Alert/requirements.txt index 7d012dbdcd..6e8d58376c 100644 --- a/Amazon-Price-Alert/requirements.txt +++ b/Amazon-Price-Alert/requirements.txt @@ -6,7 +6,7 @@ chardet==3.0.4 cssselect==1.1.0 fake-useragent==0.1.11 idna==2.10 -lxml==4.6.3 +lxml==4.6.5 parse==1.18.0 pyee==7.0.4 pyppeteer==0.2.2 From 870e0987e04825af3cba3df1388d9d31fa91a300 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: 2021年12月15日 00:31:48 +0000 Subject: [PATCH 2/8] fix: Internshala-Scraper/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-LXML-2316995 --- Internshala-Scraper/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Internshala-Scraper/requirements.txt b/Internshala-Scraper/requirements.txt index d3be64d51d..37ec0877fe 100644 --- a/Internshala-Scraper/requirements.txt +++ b/Internshala-Scraper/requirements.txt @@ -3,7 +3,7 @@ bs4==0.0.1 certifi==2020年6月20日 chardet==3.0.4 idna==2.10 -lxml==4.5.2 +lxml==4.6.5 requests==2.24.0 soupsieve==2.0.1 urllib3==1.25.10 From 0377180e42a3ed81f01b274655d7e9cd7a6d929b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: 2021年12月15日 00:31:59 +0000 Subject: [PATCH 3/8] fix: PDFToWord/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-LXML-2316995 --- PDFToWord/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/PDFToWord/requirements.txt b/PDFToWord/requirements.txt index c68f14fd12..a07f8bc827 100644 --- a/PDFToWord/requirements.txt +++ b/PDFToWord/requirements.txt @@ -1,5 +1,5 @@ fire==0.4.0 -lxml==4.6.3 +lxml==4.6.5 pdf2docx==0.5.1 PyMuPDF==1.18.12 python-docx==0.8.10 From d9a2198050f6c09326684a55aafa01b351940108 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: 2021年12月15日 00:32:25 +0000 Subject: [PATCH 4/8] fix: Unfollowers-Insta/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-1533435 --- Unfollowers-Insta/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Unfollowers-Insta/requirements.txt b/Unfollowers-Insta/requirements.txt index 3959f29ba7..dfd72186cb 100644 --- a/Unfollowers-Insta/requirements.txt +++ b/Unfollowers-Insta/requirements.txt @@ -1,2 +1,2 @@ selenium==3.141.0 -urllib3==1.25.10 +urllib3==1.26.5 From 500e52eadd8d3ae4dea1bce2e707f1888a6662b4 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: 2021年12月15日 00:33:09 +0000 Subject: [PATCH 5/8] fix: Twitter_Scraper_without_API/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-LXML-2316995 --- Twitter_Scraper_without_API/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Twitter_Scraper_without_API/requirements.txt b/Twitter_Scraper_without_API/requirements.txt index 1b4c762254..fc4f1bd93d 100644 --- a/Twitter_Scraper_without_API/requirements.txt +++ b/Twitter_Scraper_without_API/requirements.txt @@ -2,7 +2,7 @@ beautifulsoup4==4.9.3 certifi==2020年12月5日 chardet==4.0.0 idna==2.10 -lxml==4.6.2 +lxml==4.6.5 PySocks==1.7.1 requests==2.25.1 snscrape==0.3.4 From b41e3dd8604f3d11338bae5264613e94546a2647 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: 2021年12月15日 00:33:28 +0000 Subject: [PATCH 6/8] fix: Whatsapp_COVID-19_Bot/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-1533435 --- Whatsapp_COVID-19_Bot/requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/Whatsapp_COVID-19_Bot/requirements.txt b/Whatsapp_COVID-19_Bot/requirements.txt index 75792f28d9..95079365b9 100644 --- a/Whatsapp_COVID-19_Bot/requirements.txt +++ b/Whatsapp_COVID-19_Bot/requirements.txt @@ -3,3 +3,4 @@ twilio==6.41.0 pandas==0.25.3 requests==2.22.0 apscheduler==3.6.3 +urllib3>=1.26.5 # not directly required, pinned by Snyk to avoid a vulnerability From 3969ac84bbd487d35b730caf16a9ead99699a8c9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: 2021年12月15日 07:21:22 +0000 Subject: [PATCH 7/8] Bump urllib3 from 1.25.11 to 1.26.5 in /Codechef Scrapper Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.25.11 to 1.26.5. - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](https://github.com/urllib3/urllib3/compare/1.25.11...1.26.5) --- updated-dependencies: - dependency-name: urllib3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- Codechef Scrapper/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Codechef Scrapper/requirements.txt b/Codechef Scrapper/requirements.txt index 5ec7b458ce..42f4bff14d 100644 --- a/Codechef Scrapper/requirements.txt +++ b/Codechef Scrapper/requirements.txt @@ -1,4 +1,4 @@ fpdf==1.7.2 requests==2.24.0 selenium==3.141.0 -urllib3==1.25.11 +urllib3==1.26.5 From 4bff81d2bfa984a4568c0de9018140cf298e1c60 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: 2021年12月15日 07:21:34 +0000 Subject: [PATCH 8/8] Bump django from 3.1.4 to 3.1.14 in /Calculate-distance Bumps [django](https://github.com/django/django) from 3.1.4 to 3.1.14. - [Release notes](https://github.com/django/django/releases) - [Commits](https://github.com/django/django/compare/3.1.4...3.1.14) --- updated-dependencies: - dependency-name: django dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- Calculate-distance/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Calculate-distance/requirements.txt b/Calculate-distance/requirements.txt index bbd09633d7..1f1d3c62b5 100644 --- a/Calculate-distance/requirements.txt +++ b/Calculate-distance/requirements.txt @@ -1,4 +1,4 @@ geopy==2.1.0 folium==0.12.1 django-crispy-forms==1.11.0 -Django==3.1.4 +Django==3.1.14

AltStyle によって変換されたページ (->オリジナル) /