Update dependency PyJWT to v2 #65
Security Report
You have successfully remediated 3 vulnerabilities, but introduced 2 new vulnerabilities in this branch.
❌ New vulnerabilities:
| Vulnerability | Severity | Vulnerable Library | Direct Library | Suggested Fix | Issue | |
|---|---|---|---|---|---|---|
CVE-2019-11324Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260318064223_UTKUNO/python_COGWAQ/20260318064224/12/urllib3-1.21.1-py2.py3-none-any.whl Dependency Hierarchy: -> ❌ urllib3-1.21.1-py2.py3-none-any.whl (Vulnerable Library) |
7.5 | Direct urllib3-1.21.1-py2.py3-none-any.whl |
urllib3-1.21.1-py2.py3-none-any.whl | urllib3 - 1.24.2 | None | |
CVE-2025-71176Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260318064223_UTKUNO/python_COGWAQ/20260318064224/17/pytest-8.4.2-py3-none-any.whl Dependency Hierarchy: -> ❌ pytest-8.4.2-py3-none-any.whl (Vulnerable Library) |
6.8 | Direct pytest-8.4.2-py3-none-any.whl |
pytest-8.4.2-py3-none-any.whl | None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2026-32597 | PyJWT-1.5.2-py2.py3-none-any.whl |
| CVE-2022-29217 | PyJWT-1.5.2-py2.py3-none-any.whl |
| CVE-2024-5569 | zipp-3.9.0-py3-none-any.whl |
Base branch total remaining vulnerabilities: 33
Base branch commit: null
Total libraries scanned: 41
Scan token: 2a1531ab1faa4bb3a9fcb6c3e135bbf0