Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency sqlalchemy to v1.4.20 - autoclosed #49

Closed
wants to merge 1 commit into from

chore(deps): update dependency sqlalchemy to v1.4.20

0a46385
Select commit
Loading
Failed to load commit list.
Closed

chore(deps): update dependency sqlalchemy to v1.4.20 - autoclosed #49

chore(deps): update dependency sqlalchemy to v1.4.20
0a46385
Select commit
Loading
Failed to load commit list.
Mend for GitHub.com / Mend Security Check failed Oct 6, 2024 in 7m 40s

Security Report

You have successfully remediated 1 vulnerabilities, but introduced 1 new vulnerabilities in this branch.

❌ New vulnerabilities:

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue
CVE-2024-5569

Path to dependency file: /data-files/benchmarks/bm_sqlalchemy_declarative/requirements.txt

Path to vulnerable library: /data-files/benchmarks/bm_sqlalchemy_declarative/requirements.txt,/data-files/benchmarks/bm_sqlalchemy_imperative/requirements.txt

Dependency Hierarchy:

-> SQLAlchemy-1.4.20-cp37-cp37m-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Root Library)

   -> importlib_metadata-6.7.0-py3-none-any.whl

     -> ❌ zipp-3.15.0-py3-none-any.whl (Vulnerable Library)

Low 3.3 zipp-3.15.0-py3-none-any.whl Upgrade to version: zipp - 3.19.1 None

✔️ Remediated vulnerabilities:

CVE Vulnerable Library
CVE-2024-5569 zipp-3.11.0-py3-none-any.whl

Base branch total remaining vulnerabilities: 38
Base branch commit: null


Total libraries scanned: 43

Scan token: 3e25d2c9646c41e28ebea7d2921c9ec7

View more details on Mend for GitHub.com