Repository navigation
chore(deps): update dependency jupyterlite-core to v0.8.6 - #106
ibm-mend-app[bot] wants to merge 1 commit into
Security Report
Scan Successful: While the scan completed successfully, additional details and messages were generated during the process.
Scan Details Report
poetry
/tmp/ws-scm/skillsnetwork-python-library
| Step | Level | Details |
|---|---|---|
| Installing required binary versions | ℹ️Info | failed to switch to required poetry version: failed to parse poetry version "==1.9.1" as constraint or version: improper constraint: ==1.9.1 invalid semantic version |
8 new vulnerabilities were introduced in this branch.❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Exploit Maturity | EPSS | Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|---|---|
CVE-2026-97689Dependency Hierarchy: -> ibm_cos_sdk-2.16.1.tar.gz (Root Library) -> ibm_cos_sdk_core-2.16.1.tar.gz -> requests-2.32.5-py3-none-any.whl -> ❌ urllib3-2.6.3-py3-none-any.whl (Vulnerable Library) |
 High |
8.6 | Not Defined | 0.292% | Transitive urllib3-2.6.3-py3-none-any.whl |
ibm_cos_sdk-2.16.1.tar.gz | Transitive 2.8.0 |
None |
CVE-2026-44432Dependency Hierarchy: -> ibm_cos_sdk-2.16.1.tar.gz (Root Library) -> ibm_cos_sdk_core-2.16.1.tar.gz -> requests-2.32.5-py3-none-any.whl -> ❌ urllib3-2.6.3-py3-none-any.whl (Vulnerable Library) |
High |
8.6 | Not Defined | 0.882% | Transitive urllib3-2.6.3-py3-none-any.whl |
ibm_cos_sdk-2.16.1.tar.gz | Transitive 2.7.0 |
None |
CVE-2026-97687Dependency Hierarchy: -> ibm_cos_sdk-2.16.1.tar.gz (Root Library) -> ibm_cos_sdk_core-2.16.1.tar.gz -> requests-2.32.5-py3-none-any.whl -> ❌ urllib3-2.6.3-py3-none-any.whl (Vulnerable Library) |
High |
8.1 | Not Defined | 0.242% | Transitive urllib3-2.6.3-py3-none-any.whl |
ibm_cos_sdk-2.16.1.tar.gz | Transitive 2.8.0 |
None |
CVE-2026-44431Dependency Hierarchy: -> ibm_cos_sdk-2.16.1.tar.gz (Root Library) -> ibm_cos_sdk_core-2.16.1.tar.gz -> requests-2.32.5-py3-none-any.whl -> ❌ urllib3-2.6.3-py3-none-any.whl (Vulnerable Library) |
 Medium |
5.9 | Not Defined | 0.339% | Transitive urllib3-2.6.3-py3-none-any.whl |
ibm_cos_sdk-2.16.1.tar.gz | Transitive 2.7.0 |
None |
CVE-2026-97688Dependency Hierarchy: -> ibm_cos_sdk-2.16.1.tar.gz (Root Library) -> ibm_cos_sdk_core-2.16.1.tar.gz -> requests-2.32.5-py3-none-any.whl -> ❌ urllib3-2.6.3-py3-none-any.whl (Vulnerable Library) |
Medium |
5.3 | Not Defined | 0.291% | Transitive urllib3-2.6.3-py3-none-any.whl |
ibm_cos_sdk-2.16.1.tar.gz | Transitive 2.8.0 |
None |
CVE-2026-86000Dependency Hierarchy: -> pydata_sphinx_theme-0.9.0-py3-none-any.whl (Root Library) -> beautifulsoup4-4.13.5.tar.gz -> ❌ soupsieve-2.8.4-py3-none-any.whl (Vulnerable Library) |
Medium |
5.3 | Not Defined | 0.609% | Transitive soupsieve-2.8.4-py3-none-any.whl |
pydata_sphinx_theme-0.9.0-py3-none-any.whl | None | |
CVE-2026-85999Dependency Hierarchy: -> pydata_sphinx_theme-0.9.0-py3-none-any.whl (Root Library) -> beautifulsoup4-4.13.5.tar.gz -> ❌ soupsieve-2.8.4-py3-none-any.whl (Vulnerable Library) |
Medium |
5.3 | Not Defined | 0.609% | Transitive soupsieve-2.8.4-py3-none-any.whl |
pydata_sphinx_theme-0.9.0-py3-none-any.whl | None | |
| Medium |
4.4 | Not Defined | 0.185% | Direct requests-2.32.5-py3-none-any.whl |
requests-2.32.5-py3-none-any.whl | requests - 2.33.0 | None |
Base branch total remaining vulnerabilities: 0
Base branch commit: b0bbc96aa16235dda3127968f8cf758d33d34a95
Total libraries scanned: 59
Scan token: fbf6ef08cff94d3cb6f446c4dcc2e3a8