CVE-2018-18074

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

- use `raw_input` instead of `input`
- support v2 appveyor token
- use travis-ci.com instead of travis-ci.org by default
- do not try to use travis/appveyor token if `--skip-travis`/`--skip-appveyor` passed
- update requests module to >= 2.0 (GitHub security warning)

Resources

• https://pypi.org/project/bincrafters-envy
• https://pyup.io/changelogs/bincrafters-envy/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18074