Skip to content

security: vulnerability remediation - #242

Open
kernel-internal[bot] wants to merge 1 commit into
mainfrom
security/vuln-remediation
Open

security: vulnerability remediation#242
kernel-internal[bot] wants to merge 1 commit into
mainfrom
security/vuln-remediation

Conversation

@kernel-internal

@kernel-internal kernel-internal Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

Vulnerability Remediation

This PR was generated by the Socket-centric vulnerability remediation workflow. Review the planned dependency changes and confirmation evidence before merging.

Fixed

CVE/GHSA Package Ecosystem Old Version New Version Manifest Confirmation
GHSA-gc5v-m9x4-r6x2 requests None 2.32.5 2.33.0 confirmed

Not Included

  • Deferred by batch limit: 48 advisories. They will be considered by future runs.
  • Other deferred scanner findings: 4.
  • Unconfirmed attempted fixes: 0.
Deferred details
CVE/GHSA Package Reason
Unavailable from detector github.com/godbus/dbus/v5 Non-CVE alert is not handled by dependency remediation.
Unavailable from detector runtime Non-CVE alert is not handled by dependency remediation.
Unavailable from detector float Non-CVE alert is not handled by dependency remediation.
Unavailable from detector typebox Non-CVE alert is not handled by dependency remediation.

@kernel-internal
kernel-internal Bot force-pushed the security/vuln-remediation branch from d29092c to 5cb995c Compare September 9, 2026 03:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant