Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade eventlet from 0.35.2 to 0.37.0 #277

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

fix: src/kubedash/requirements.txt to reduce vulnerabilities

156b569
Select commit
Loading
Failed to load commit list.
Open

[Snyk] Security upgrade eventlet from 0.35.2 to 0.37.0 #277

fix: src/kubedash/requirements.txt to reduce vulnerabilities
156b569
Select commit
Loading
Failed to load commit list.
Mend Bolt for GitHub / Mend Security Check failed Oct 2, 2024 in 3m 58s

Security Report

You have successfully remediated 1 vulnerabilities, but introduced 1 new vulnerabilities in this branch.

❌ New vulnerabilities:

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue
CVE-2024-6345

Path to dependency file: /docs/build/requirements.txt

Path to vulnerable library: /docs/build/requirements.txt

Dependency Hierarchy:

-> ❌ setuptools-68.0.0-py3-none-any.whl (Vulnerable Library)

High 7.0 setuptools-68.0.0-py3-none-any.whl Upgrade to version: setuptools - 70.0.0 None

✔️ Remediated vulnerabilities:

CVE Vulnerable Library
CVE-2024-34064 Jinja2-3.1.3-py3-none-any.whl

Base branch total remaining vulnerabilities: 12
Base branch commit: 898f2b8122e263c9dd491bf6b6d50b066d2d5cac


Total libraries scanned: 201

Scan token: f63cd58f69824a359e43406173f07c51

View more details on Mend Bolt for GitHub