Skip to content

Update dependency urllib3 to v2 - #30

Open
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/urllib3-2.x
Open

Update dependency urllib3 to v2#30
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/urllib3-2.x

Update dependency urllib3 to v2

330784d
Select commit
Loading
Failed to load commit list.
Mend for GitHub.com / WhiteSource Security Check failed May 15, 2026 in 1m 36s

Security Report

You have successfully remediated 17 vulnerabilities, but introduced 14 new vulnerabilities in this branch.

❌ New vulnerabilities:

Vulnerability Severity CVSS Score Vulnerable Library Direct Library Suggested Fix Issue
CVE-2026-21441

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/urllib3-1.26.20.dist-info

Dependency Hierarchy:

-> requests-2.28.2-py3-none-any.whl (Root Library)

   -> ❌ urllib3-1.26.20-py2.py3-none-any.whl (Vulnerable Library)

High 8.6 Transitive urllib3-1.26.20-py2.py3-none-any.whl requests-2.28.2-py3-none-any.whl Transitive 2.6.3 #15
CVE-2025-66471

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/urllib3-1.26.20.dist-info

Dependency Hierarchy:

-> requests-2.28.2-py3-none-any.whl (Root Library)

   -> ❌ urllib3-1.26.20-py2.py3-none-any.whl (Vulnerable Library)

High 8.6 Transitive urllib3-1.26.20-py2.py3-none-any.whl requests-2.28.2-py3-none-any.whl Transitive urllib3 - 2.6.0,https://github.com/urllib3/urllib3.git - 2.6.0 #15
CVE-2025-66418

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/urllib3-1.26.20.dist-info

Dependency Hierarchy:

-> requests-2.28.2-py3-none-any.whl (Root Library)

   -> ❌ urllib3-1.26.20-py2.py3-none-any.whl (Vulnerable Library)

High 8.6 Transitive urllib3-1.26.20-py2.py3-none-any.whl requests-2.28.2-py3-none-any.whl Transitive https://github.com/urllib3/urllib3.git - 2.6.0,urllib3 - 2.6.0 #15
CVE-2024-26130

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/cryptography-39.0.0.dist-info

Dependency Hierarchy:

-> ❌ cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl (Vulnerable Library)

High 7.5 Direct cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl 42.0.4 None
CVE-2023-50782

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/cryptography-39.0.0.dist-info

Dependency Hierarchy:

-> ❌ cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl (Vulnerable Library)

High 7.5 Direct cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl 42.0.0 None
CVE-2023-38325

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/cryptography-39.0.0.dist-info

Dependency Hierarchy:

-> ❌ cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl (Vulnerable Library)

High 7.5 Direct cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl 41.0.2 None
CVE-2026-44431

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/urllib3-1.26.20.dist-info

Dependency Hierarchy:

-> requests-2.28.2-py3-none-any.whl (Root Library)

   -> ❌ urllib3-1.26.20-py2.py3-none-any.whl (Vulnerable Library)

Medium 5.9 Transitive urllib3-1.26.20-py2.py3-none-any.whl requests-2.28.2-py3-none-any.whl Transitive 2.7.0 #15
CVE-2026-26007

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/cryptography-39.0.0.dist-info

Dependency Hierarchy:

-> ❌ cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl (Vulnerable Library)

Medium 5.9 Direct cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl 46.0.5 None
CVE-2024-3772

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/pydantic-1.10.4.dist-info

Dependency Hierarchy:

-> ❌ pydantic-1.10.4-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.9 Direct pydantic-1.10.4-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl pydantic-1.10.4-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl 1.10.13 None
CVE-2023-49083

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/cryptography-39.0.0.dist-info

Dependency Hierarchy:

-> ❌ cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl (Vulnerable Library)

Medium 5.9 Direct cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl 41.0.6 None
CVE-2024-0727

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/cryptography-39.0.0.dist-info

Dependency Hierarchy:

-> ❌ cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl (Vulnerable Library)

Medium 5.5 Direct cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl openssl - 1.1.1x,openssl - 3.0.13,openssl - 3.1.5,openssl - 3.2.1,openssl - 3.2.1,openssl - 1.1.1x,openssl - 3.0.13,openssl - 3.1.5,https://github.com/openssl/openssl.git - openssl-1.1.1x,https://github.com/openssl/openssl.git - openssl-3.2.1,https://github.com/openssl/openssl.git - openssl-3.1.5,https://github.com/openssl/openssl.git - openssl-3.0.13,https://github.com/openssl/openssl.git - openssl-1.0.2zj None
CVE-2025-50181

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/urllib3-1.26.20.dist-info

Dependency Hierarchy:

-> requests-2.28.2-py3-none-any.whl (Root Library)

   -> ❌ urllib3-1.26.20-py2.py3-none-any.whl (Vulnerable Library)

Medium 5.3 Transitive urllib3-1.26.20-py2.py3-none-any.whl requests-2.28.2-py3-none-any.whl Transitive 2.5.0 #15
CVE-2023-23931

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/cryptography-39.0.0.dist-info

Dependency Hierarchy:

-> ❌ cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl (Vulnerable Library)

Medium 4.8 Direct cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl 39.0.1 None
CVE-2026-34073

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260515004113_PYQGUD/python_LFRBBJ/202605150041141/env/lib/python3.10/site-packages/cryptography-39.0.0.dist-info

Dependency Hierarchy:

-> ❌ cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl (Vulnerable Library)

Low 3.7 Direct cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl cryptography-39.0.0-cp36-abi3-manylinux_2_28_x86_64.whl cryptography - 46.0.6 None

✔️ Remediated vulnerabilities:

Vulnerability Vulnerable Library
CVE-2023-38325 cryptography-39.0.0-cp36-abi3-manylinux_2_24_x86_64.whl
CVE-2023-45803 urllib3-1.26.14-py2.py3-none-any.whl
CVE-2024-0727 cryptography-39.0.0-cp36-abi3-manylinux_2_24_x86_64.whl
CVE-2026-21441 urllib3-1.26.14-py2.py3-none-any.whl
CVE-2023-43804 urllib3-1.26.14-py2.py3-none-any.whl
CVE-2025-66418 urllib3-1.26.14-py2.py3-none-any.whl
CVE-2023-50782 cryptography-39.0.0-cp36-abi3-manylinux_2_24_x86_64.whl
CVE-2024-3772 pydantic-1.10.4-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
CVE-2025-50181 urllib3-1.26.14-py2.py3-none-any.whl
CVE-2024-37891 urllib3-1.26.14-py2.py3-none-any.whl
CVE-2026-34073 cryptography-39.0.0-cp36-abi3-manylinux_2_24_x86_64.whl
CVE-2025-66471 urllib3-1.26.14-py2.py3-none-any.whl
CVE-2026-26007 cryptography-39.0.0-cp36-abi3-manylinux_2_24_x86_64.whl
CVE-2026-44431 urllib3-1.26.14-py2.py3-none-any.whl
CVE-2024-26130 cryptography-39.0.0-cp36-abi3-manylinux_2_24_x86_64.whl
CVE-2023-49083 cryptography-39.0.0-cp36-abi3-manylinux_2_24_x86_64.whl
CVE-2023-23931 cryptography-39.0.0-cp36-abi3-manylinux_2_24_x86_64.whl

Base branch total remaining vulnerabilities: 42
Base branch commit: null


Total libraries scanned: 27

Scan token: 0feca2d7cd1a460fba6dc851469d654e

View more details on Mend for GitHub.com