Repository navigation
chore(ci): bump the actions-minor-and-patch group with 2 updates - #2
An automation triggered a pipeline warning
Found 23 vulnerabilities. An additional 0 vulnerabilities have been marked as unaffected.
Output from Automations
5 rules were checked:
If聽a new dependency is added聽where the license risk聽is at least medium
then notify all users in the group聽admins by email
鉁旓笍 The rule did not trigger. Manage rule
If聽there is a dependency聽where the license risk聽is at least high
then send a pipeline warning
鉁旓笍 The rule did not trigger. Manage rule
If聽there is a dependency that is in denied list
then send a pipeline warning
鉁旓笍 The rule did not trigger. Manage rule
If聽a dependency contains a vulnerability which has not been marked as unaffected聽and聽which has not triggered this rule for this dependency before
then notify all users in the group聽admins by email
馃摛 The rule triggered for the following vulnerabilities, causing an email notification. Manage rule
| Vulnerability | CVSS2 | CVSS3 | CVSS4 | Dependency | Dependency Licenses |
|---|---|---|---|---|---|
| CVE-2026-97687 | N/A | N/A | 7.6 | urllib3 (pypi) | MIT |
| CVE-2026-49264 | N/A | N/A | N/A | oauthlib (pypi) | BSD-3-Clause |
If聽a dependency contains a vulnerability which has not been marked as unaffected
then send a pipeline warning