Skip to content

Security updates - #449

Open
github-actions[bot] wants to merge 1 commit into
masterfrom
security-updates
Open

github-actions[bot] wants to merge 1 commit into
masterfrom
security-updates

Conversation

@github-actions

@github-actions github-actions Bot commented Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

Security Vulnerability Report

Generated on: 2026-10-23 03:57:20

Summary

Found vulnerabilities in 5 packages requiring updates.

Package Upgrades Overview

Package Current Version Recommended Version Vulnerabilities
aiohttp 3.14.3 3.14.4 8
black 26.3.1 26.10.1 1
certifi 2025.6.15 2026.10.19 1
pillow 12.3.0 13.0.0 35
virtualenv 21.7.13 21.14.9 5

Detailed Vulnerability Information

aiohttp (v3.14.3)

Vulnerability ID Fix Versions Aliases
CVE-2026-111064 3.14.4 GHSA-5wr8-gcqf-gqf3
GHSA-2g87-pp6c-29x5 3.14.4
CVE-2026-111063 3.14.4 GHSA-494j-54xm-rwp3
CVE-2026-111750 3.14.4 GHSA-pqxq-w44r-73xw
CVE-2026-111066 3.14.4 GHSA-9xw5-w5jj-pvcg
CVE-2026-111749 3.14.4 GHSA-gx76-c99x-2c96
CVE-2026-111065 3.14.4 GHSA-6cjc-53gc-5rqm
CVE-2026-111748 3.14.4 GHSA-f9xw-jh8m-3mwq

black (v26.3.1)

Vulnerability ID Fix Versions Aliases
CVE-2026-114134 26.10.1 GHSA-cg8m-r9f2-5wm2

certifi (v2025.6.15)

Vulnerability ID Fix Versions Aliases
PYSEC-2026-4320 2026.10.19 GHSA-6q48-6c7w-9gw2

pillow (v12.3.0)

Vulnerability ID Fix Versions Aliases
CVE-2026-112895 13.0.0 GHSA-p4wg-p73j-c528
CVE-2026-112400 13.0.0 GHSA-65qm-jvmh-6pqg
CVE-2026-112397 13.0.0 GHSA-58r4-6rv3-gfh8
CVE-2026-112896 13.0.0 GHSA-pchr-8j38-3x4p
CVE-2026-112897 13.0.0 GHSA-q45j-58j2-45rg
CVE-2026-112395 13.0.0 GHSA-462x-pgg6-55fp
CVE-2026-112404 13.0.0 GHSA-c6hw-5grf-ff96
CVE-2026-112899 13.0.0 GHSA-vx6w-vv9f-6gvg
CVE-2026-112402 13.0.0 GHSA-7mwm-ghpf-9vrm
CVE-2026-112900 13.0.0 GHSA-w889-685w-c8fh
CVE-2026-112893 13.0.0 GHSA-j4m9-6w36-pw47
CVE-2026-112392 13.0.0 GHSA-27h8-gf7j-v5hc
CVE-2026-112891 13.0.0 GHSA-fc9g-5qg7-mf45
CVE-2026-112405 13.0.0 GHSA-cp9v-662q-vvx9
CVE-2026-112390 13.0.0 GHSA-22hg-r758-rrw9
CVE-2026-112401 13.0.0 GHSA-74r2-7ff9-mjj2
CVE-2026-112901 13.0.0 GHSA-xgh8-jp6q-p5x8
CVE-2026-112391 13.0.0 GHSA-254f-3936-288h
CVE-2026-112894 13.0.0 GHSA-jg86-v3jv-hrpm
CVE-2026-112406 13.0.0 GHSA-f2g6-542v-9j58
CVE-2026-112399 13.0.0 GHSA-5xm2-6676-qcp9
CVE-2026-112892 13.0.0 GHSA-gg2r-wvfm-q9rx
CVE-2026-112393 13.0.0 GHSA-332p-7hrc-92wf
CVE-2026-112396 13.0.0 GHSA-4rr5-89j8-mwwm
CVE-2026-96638 13.0.0 GHSA-24rc-8hj2-v98c
CVE-2026-96641 13.0.0 GHSA-4rm8-3hmm-39fg
CVE-2026-96640 13.0.0 GHSA-mrfp-p49p-3hf2
CVE-2026-96642 13.0.0 GHSA-3j72-p6qg-6xp7
CVE-2026-96639 13.0.0 GHSA-v9pv-5gc8-w2m6
CVE-2026-96643 13.0.0 GHSA-g4qv-2jxx-769h
CVE-2026-96637 13.0.0 GHSA-g842-9rc4-69pw
CVE-2026-96644 13.0.0 GHSA-9v9v-9qvf-h2hj
CVE-2026-96778 13.0.0 GHSA-g7cr-3p24-7wf7
CVE-2026-96636 13.0.0 GHSA-p8hx-v2p6-rp84
GHSA-78g4-xqwv-q3g8 13.0.0

virtualenv (v21.7.13)

Vulnerability ID Fix Versions Aliases
CVE-2026-113726 21.14.4 GHSA-5vjq-rrrf-7h2q
CVE-2026-113776 21.14.2 GHSA-8rjx-v5ww-45pp
CVE-2026-113732 21.14.2 GHSA-c947-3pg5-gm8q
CVE-2026-113725 21.14.7 GHSA-vxj4-q4g9-crj7
CVE-2026-113722 21.14.9 GHSA-c978-59m8-c77v

Recommended Actions

  1. Review the vulnerability details above.
  2. Close and reopen this PR to trigger CI/CD tests.
  3. Approve and merge the PR if everything looks good.

This report was generated automatically. Please verify all upgrades before applying.

@github-actions
github-actions Bot force-pushed the security-updates branch 2 times, most recently from 33546aa to 208976e Compare October 22, 2026 03:53

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants