Skip to content

Commit 928c65a

Browse files
committed
[pip] update dependency lock files
Update the pip dependency lock files. The main purpose is to update urllib to 2.6.2, which includes fixes for security vulnerabilities, reported by pip-audit.
1 parent 0aacba7 commit 928c65a

6 files changed

Lines changed: 2005 additions & 1803 deletions

File tree

SECURITY.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -55,9 +55,7 @@ The following table lists all known vulnerabilities that could not be fixed:
5555

5656
| Package | Vulnerability ID | Vulnerable Version | Fixed Version | Python Version | Reason |
5757
| ---------- | ------------------- | ------------------ | ------------- | -------------- | ------------------------------------ |
58-
| urllib3 | GHSA-48p4-8xcf-vxj5 | 2.2.3 | 2.5.0 | 3.8 | Fixed package requires Python >= 3.9 |
59-
| urllib3 | GHSA-pq67-6m6q-mj2v | 2.2.3 | 2.5.0 | 3.8 | Fixed package requires Python >= 3.9 |
60-
| pip | GHSA-4xh5-x5gv-qwph | 25.0.1 | 25.3 | 3.8 | Fixed package requires Python >= 3.9 |
58+
| | | | | | |
6159

6260
### Vulnerable Python Versions
6361

0 commit comments

Comments
 (0)