Skip to content

Merge pull request #821 from asfadmin/gjc/refactor/aws_s3_object

Mend Bolt for GitHub / WhiteSource Security Check failed Jun 12, 2024 in 4m 22s

Security Report

The Security Check found 2 vulnerabilities.

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue
CVE-2024-26130

Dependency Hierarchy:

-> ❌ cryptography-41.0.7-cp37-abi3-manylinux_2_28_x86_64.whl (Vulnerable Library)

High 7.5 cryptography-41.0.7-cp37-abi3-manylinux_2_28_x86_64.whl Upgrade to version: cryptography - 42.0.4 #800
CVE-2023-50782

Dependency Hierarchy:

-> ❌ cryptography-41.0.7-cp37-abi3-manylinux_2_28_x86_64.whl (Vulnerable Library)

High 7.5 cryptography-41.0.7-cp37-abi3-manylinux_2_28_x86_64.whl Upgrade to version: cryptography - 42.0.0 #798

Total libraries scanned: 34
Scan token: 8c06a77ad1534cc4b6c213080ebe45db