chore(deps): update dependency urllib3 to v1.26.19 #46
Security Report
❌ New vulnerabilities:
| CVE | Severity |  CVSS Score |
Vulnerable Library | Suggested Fix | Issue |
|---|---|---|---|---|---|
CVE-2024-5569Path to dependency file: /data-files/benchmarks/bm_sqlalchemy_imperative/requirements.txt Path to vulnerable library: /data-files/benchmarks/bm_sqlalchemy_imperative/requirements.txt,/data-files/benchmarks/bm_sqlalchemy_declarative/requirements.txt Dependency Hierarchy: -> SQLAlchemy-1.4.19-cp37-cp37m-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Root Library) -> importlib_metadata-6.7.0-py3-none-any.whl -> ❌ zipp-3.15.0-py3-none-any.whl (Vulnerable Library) |
 Low |
3.3 | zipp-3.15.0-py3-none-any.whl | Upgrade to version: zipp - 3.19.1 | #38 |
✔️ Remediated vulnerabilities:
| CVE | Vulnerable Library |
|---|---|
| CVE-2023-43804 | urllib3-1.26.5-py2.py3-none-any.whl |
| CVE-2024-37891 | urllib3-1.26.5-py2.py3-none-any.whl |
| CVE-2024-5569 | zipp-3.11.0-py3-none-any.whl |
| CVE-2023-45803 | urllib3-1.26.5-py2.py3-none-any.whl |
Base branch total remaining vulnerabilities: 38
Base branch commit: null
Total libraries scanned: 43
Scan token: 56132b6022b04f55b8e56b9f1c884fa2