Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.
✨ Snyk has automatically assigned this pull request, set who gets assigned.
As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.
Changes included in this PR
Vulnerabilities that will be fixed
By pinning:
Why? Has a fix available, CVSS 6.8
SNYK-PYTHON-CERTIFI-3164749
certifi:
2022.5.18.1 -> 2023.7.22
Why? Has a fix available, CVSS 9.8
SNYK-PYTHON-CERTIFI-5805047
certifi:
2022.5.18.1 -> 2023.7.22
Why? Has a fix available, CVSS 7.5
SNYK-PYTHON-GRPCIO-5834443
grpcio:
1.46.3 -> 1.53.2
Why? Proof of Concept exploit, Has a fix available, CVSS 9.8
SNYK-PYTHON-JOBLIB-3027033
joblib:
1.1.0 -> 1.1.1
Why? Has a fix available, CVSS 7.8
SNYK-PYTHON-JUPYTERCORE-3063766
jupyter-core:
4.10.0 -> 4.11.2
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
SNYK-PYTHON-NUMPY-2321964
numpy:
1.21.3 -> 1.22.2
Why? Has a fix available, CVSS 3.7
SNYK-PYTHON-NUMPY-2321966
numpy:
1.21.3 -> 1.22.2
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
SNYK-PYTHON-NUMPY-2321970
numpy:
1.21.3 -> 1.22.2
Why? Has a fix available, CVSS 5.7
SNYK-PYTHON-OAUTHLIB-3021142
oauthlib:
3.2.0 -> 3.2.2
Why? Has a fix available, CVSS 5.7
SNYK-PYTHON-PROTOBUF-3031740
protobuf:
3.19.4 -> 3.19.5
Why? Has a fix available, CVSS 5.3
SNYK-PYTHON-PYGMENTS-5750273
pygments:
2.12.0 -> 2.15.0
Why? Has a fix available, CVSS 6.1
SNYK-PYTHON-REQUESTS-5595532
requests:
2.28.0 -> 2.31.0
Why? Has a fix available, CVSS 5.9
SNYK-PYTHON-SETUPTOOLS-3180412
setuptools:
39.0.1 -> 65.5.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136192
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136196
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136200
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 7.1
SNYK-PYTHON-TENSORFLOW-3136204
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136208
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136212
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 4.6
SNYK-PYTHON-TENSORFLOW-3136216
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136220
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136224
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136228
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136232
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136236
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136240
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136244
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 4.8
SNYK-PYTHON-TENSORFLOW-3136248
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136252
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136256
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136260
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 6.8
SNYK-PYTHON-TENSORFLOW-3136264
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 4.8
SNYK-PYTHON-TENSORFLOW-3136268
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136272
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-TENSORFLOW-3136276
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 6.8
SNYK-PYTHON-TENSORFLOW-3136280
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 7.3
SNYK-PYTHON-TENSORFLOW-3136509
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3136512
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3136515
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 5.9
SNYK-PYTHON-TENSORFLOW-3136520
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3372984
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3372987
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3372990
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3372993
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
SNYK-PYTHON-TENSORFLOW-3372996
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 8
SNYK-PYTHON-TENSORFLOW-3372999
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3373002
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3373005
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3373008
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3373011
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
SNYK-PYTHON-TENSORFLOW-3373014
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3373017
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3373020
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3373023
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3373026
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3373029
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3373032
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3373035
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3373038
tensorflow:
2.9.1 -> 2.11.1
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-PYTHON-TENSORFLOW-3373041
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 6.5
SNYK-PYTHON-TENSORFLOW-5291376
tensorflow:
2.9.1 -> 2.11.1
Why? Has a fix available, CVSS 3.4
SNYK-PYTHON-TORNADO-5537286
tornado:
6.1 -> 6.3.3
Why? Has a fix available, CVSS 5.6
SNYK-PYTHON-TORNADO-5840803
tornado:
6.1 -> 6.3.3
Why? Has a fix available, CVSS 6.5
SNYK-PYTHON-TORNADO-6041512
tornado:
6.1 -> 6.3.3
Why? Has a fix available, CVSS 5.9
SNYK-PYTHON-URLLIB3-5926907
urllib3:
1.26.9 -> 1.26.18
Why? Has a fix available, CVSS 4.2
SNYK-PYTHON-URLLIB3-6002459
urllib3:
1.26.9 -> 1.26.18
Why? Has a fix available, CVSS 2.6
SNYK-PYTHON-WERKZEUG-3319935
werkzeug:
2.1.2 -> 2.3.8
Why? Has a fix available, CVSS 7.5
SNYK-PYTHON-WERKZEUG-3319936
werkzeug:
2.1.2 -> 2.3.8
Why? Has a fix available, CVSS 6.5
SNYK-PYTHON-WERKZEUG-6035177
werkzeug:
2.1.2 -> 2.3.8
Why? Has a fix available, CVSS 7.5
SNYK-PYTHON-WHEEL-3180413
wheel:
0.30.0 -> 0.38.0
(*) Note that the real score may have changed since the PR was raised.
Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
👩💻 Set who automatically gets assigned
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Arbitrary Code Execution
🦉 Improper Privilege Management
🦉 NULL Pointer Dereference
🦉 More lessons are available in Snyk Learn