Skip to content

Bump urllib3 from 2.2.3 to 2.7.0 - #5747

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/urllib3-2.7.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/urllib3-2.7.0

Bump urllib3 from 2.2.3 to 2.7.0

bef7b6c
Select commit
Loading
Failed to load commit list.
Orca Security (US) / Orca Security - Vulnerabilities succeeded Sep 18, 2026 in 24s

Orca Security Scan Summary

Status Check Issues by priority
Passed Warning Vulnerabilities high 6   medium 0   low 0   info 0 View in Orca
☢️ The following Vulnerabilities (CVEs) have been detected
PACKAGE FILE CVE ID INSTALLED VERSION FIXED VERSION
high jupyterlab ./uv.lock CVE-2024-22421 2.3.2 4.0.11, 3.6.7 View in code
high jupyterlab ./uv.lock CVE-2024-43805 2.3.2 3.6.8, 4.2.5 View in code
high requests ./uv.lock CVE-2018-18074 2.15.1 2.20.0 View in code
high starlette ./uv.lock CVE-2023-30798 0.14.2 0.25.0 View in code
high starlette ./uv.lock CVE-2024-47874 0.14.2 0.40.0 View in code
high starlette ./uv.lock CVE-2023-29159 0.14.2 0.27.0 View in code

Note: The scan should have failed if no policies were configured in warn-only mode.