Skip to content

chore(ci): bump the actions-minor-and-patch group with 2 updates - #2

Merged
JWEB0689 merged 1 commit into
mainfrom
dependabot/github_actions/actions-minor-and-patch-4b2c77c676
Oct 4, 2026
Merged

JWEB0689 merged 1 commit into
mainfrom
dependabot/github_actions/actions-minor-and-patch-4b2c77c676

chore(ci): bump the actions-minor-and-patch group with 2 updates

1302b75
Select commit
Loading
Failed to load commit list.
Debricked / Vulnerability analysis completed Oct 4, 2026 in 4m 17s

An automation triggered a pipeline warning

Found 23 vulnerabilities. An additional 0 vulnerabilities have been marked as unaffected.

Output from Automations

5 rules were checked:


If聽a new dependency is added聽where the license risk聽is at least medium

then notify all users in the group聽admins by email

鉁旓笍 The rule did not trigger. Manage rule



If聽there is a dependency聽where the license risk聽is at least high

then send a pipeline warning

鉁旓笍 The rule did not trigger. Manage rule



If聽there is a dependency that is in denied list

then send a pipeline warning

鉁旓笍 The rule did not trigger. Manage rule



If聽a dependency contains a vulnerability which has not been marked as unaffected聽and聽which has not triggered this rule for this dependency before

then notify all users in the group聽admins by email

馃摛 The rule triggered for the following vulnerabilities, causing an email notification. Manage rule

Vulnerability CVSS2 CVSS3 CVSS4 Dependency Dependency Licenses
CVE-2026-97687 N/A N/A 7.6 urllib3 (pypi) MIT
CVE-2026-49264 N/A N/A N/A oauthlib (pypi) BSD-3-Clause


If聽a dependency contains a vulnerability which has not been marked as unaffected

then send a pipeline warning

鈿狅笍 The rule triggered for the following vulnerabilities, causing a pipeline warning. Manage rule

Vulnerability CVSS2 CVSS3 CVSS4 Dependency Dependency Licenses
CVE-2026-102268 N/A 9.1 N/A pyjwt (pypi) MIT
CVE-2026-97689 N/A N/A 8.9 urllib3 (pypi) MIT
CVE-2024-6825 N/A 8.8 N/A litellm (pypi) Unknown License
CVE-2026-102925 N/A 7.8 N/A virtualenv (pypi) MIT
CVE-2026-102930 N/A N/A 7.7 virtualenv (pypi) MIT
CVE-2026-97687 N/A N/A 7.6 urllib3 (pypi) MIT
CVE-2026-102267 N/A 7.4 N/A pyjwt (pypi) MIT
CVE-2026-102271 N/A 7.4 N/A pyjwt (pypi) MIT
CVE-2026-102272 N/A 7.4 N/A pyjwt (pypi) MIT
CVE-2026-102273 N/A 7.4 N/A pyjwt (pypi) MIT
CVE-2026-102266 N/A 7.4 N/A pyjwt (pypi) MIT
CVE-2026-102937 N/A N/A 7.3 virtualenv (pypi) MIT
CVE-2026-97688 N/A N/A 6.9 urllib3 (pypi) MIT
CVE-2026-102274 N/A 5.9 N/A pyjwt (pypi) MIT
CVE-2026-102938 N/A N/A 5.8 virtualenv (pypi) MIT
CVE-2026-101917 N/A 5.3 N/A pyjwt (pypi) MIT
CVE-2026-102265 N/A 5.3 N/A pyjwt (pypi) MIT
CVE-2026-101918 N/A 5.3 N/A pyjwt (pypi) MIT
CVE-2026-102269 N/A 4.8 N/A pyjwt (pypi) MIT
CVE-2026-102270 N/A 4.4 N/A pyjwt (pypi) MIT
CVE-2026-49265 N/A N/A N/A oauthlib (pypi) BSD-3-Clause
CVE-2026-49264 N/A N/A N/A oauthlib (pypi) BSD-3-Clause
debricked-371967 N/A N/A N/A litellm (pypi) Unknown License