chore(deps): update dependency requests to v2.33.0 [security] #36
Mend Bolt for GitHub / WhiteSource Security Check
failed
Mar 26, 2026 in 1m 48s
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|
CVE-2026-25645Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260326104841_WYGOET/python_VHMWFB/20260326104842/13/requests-2.32.5-py3-none-any.whl Dependency Hierarchy: -> ❌ requests-2.32.5-py3-none-any.whl (Vulnerable Library) |
 Medium |
4.4 | Direct requests-2.32.5-py3-none-any.whl |
requests-2.32.5-py3-none-any.whl | None | |
 Low |
3.3 | Direct pygments-2.19.2-py3-none-any.whl |
pygments-2.19.2-py3-none-any.whl | None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2024-35195 | requests-2.31.0-py3-none-any.whl |
| CVE-2024-47081 | requests-2.31.0-py3-none-any.whl |
| CVE-2026-25645 | requests-2.31.0-py3-none-any.whl |
Base branch total remaining vulnerabilities: 21
Base branch commit: e3b0e2be745dfd07614a7e51efdf740233a4e627
Total libraries scanned: 62
Scan token: bdff4ddfadcc48dea9aab1ce908f29cf
Loading