mend-bolt-for-github[bot]

jinja2-3.1.4-py3-none-any.whl: 3 vulnerabilities (highest severity is: 8.8)

1

Vulnerable Library - jinja2-3.1.4-py3-none-any.whl A very fast and expressive template engine. Library home page: https://files.pythonhosted.org/packages/31/80/3a54838c3fb461f6fec263ebf3a3a41771bd05190238de3486aae8540c36/jinja2-3.1.4-py3-none-any.whl Path to dependency file: /requirements.txt Path to vulnerable library: /requirements.txt Found in HEAD commit: c24b250c4fdd4b0bb57881f5f09e59a6f6a1a3b5...

Vulnerable Library - h11-0.14.0-py3-none-any.whl A pure-Python, bring-your-own-I/O implementation of HTTP/1.1 Library home page: https://files.pythonhosted.org/packages/95/04/ff642e65ad6b90db43e668d70ffb6736436c7ce41fcc549f4e9472234127/h11-0.14.0-py3-none-any.whl Path to dependency file: /requirements.txt Path to vulnerable library: /requirements.txt ## Vulnerabilities | CVE | Severity...

Vulnerable Library - web3-1.10.4.tgz Path to dependency file: /SmartDappsBuilder/backend/package.json Path to vulnerable library: /SmartDappsBuilder/frontend/node_modules/base-x/package.json,/SmartDappsBuilder/backend/node_modules/base-x/package.json Found in HEAD commit: 2ed3e6d266405677eb45c15a472c288b604a1cad ## Vulnerabilities | Vulnerability | Severity | CVSS | Dependency |...

Vulnerable Library - multer-1.4.4.tgz Middleware for handling `multipart/form-data`. Library home page: https://registry.npmjs.org/multer/-/multer-1.4.4.tgz Path to dependency file: /SmartDappsBuilder/backend/package.json Path to vulnerable library: /SmartDappsBuilder/backend/node_modules/multer/package.json Found in HEAD commit: 2ed3e6d266405677eb45c15a472c288b604a1cad ## Vulnerabilities |...

Vulnerable Library - axios-0.27.2.tgz Promise based HTTP client for the browser and node.js Library home page: https://registry.npmjs.org/axios/-/axios-0.27.2.tgz Path to dependency file: /SmartDappsBuilder/frontend/package.json Path to vulnerable library: /SmartDappsBuilder/frontend/node_modules/axios/package.json Found in HEAD...

Vulnerable Library - jsonwebtoken-8.5.1.tgz JSON Web Token implementation (symmetric and asymmetric) Library home page: https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-8.5.1.tgz Path to dependency file: /SmartDappsBuilder/backend/package.json Path to vulnerable library: /SmartDappsBuilder/backend/node_modules/jsonwebtoken/package.json Found in HEAD commit: 2ed3e6d266405677eb45c15a472c288b604a1cad...

Vulnerable Library - flask-3.1.0-py3-none-any.whl A simple framework for building complex web applications. Library home page: https://files.pythonhosted.org/packages/af/47/93213ee66ef8fae3b93b3e29206f6b251e65c97bd91d8e1c5596ef15af0a/flask-3.1.0-py3-none-any.whl Path to dependency file: /Pi-CryptoConnect-Xtreme/requirements.txt Path to vulnerable library: /Pi-CryptoConnect-Xtreme/requirements.txt Found in HEAD commit:...

Vulnerable Library - react-bootstrap-2.10.9.tgz Path to dependency file: /SmartDappsBuilder/frontend/package.json Path to vulnerable library: /SmartDappsBuilder/frontend/node_modules/@babel/runtime/package.json ## Vulnerabilities | Vulnerability | Severity | CVSS | Dependency | Type | Fixed in (react-bootstrap...

Vulnerable Library - numpy-1.21.2-cp39-cp39-manylinux_2_12_x86_64.manylinux2010_x86_64.whl NumPy is the fundamental package for array computing with Python. Library home page: https://files.pythonhosted.org/packages/7a/4c/dd00ce768b0f0f7de5c486cbd9f5b922bc3af2f3a5da30121d7f7dc03130/numpy-1.21.2-cp39-cp39-manylinux_2_12_x86_64.manylinux2010_x86_64.whl Path to dependency file: /requirements.txt Path to vulnerable library: /requirements.txt Found in...

Vulnerable Library - tensorflow-2.6.0-cp39-cp39-manylinux2010_x86_64.whl TensorFlow is an open source machine learning framework for everyone. Library home page: https://files.pythonhosted.org/packages/f7/3f/1e904833a7f923c8d781abf3c0f2db5d594714465d3ac5e9a39f4e0f768d/tensorflow-2.6.0-cp39-cp39-manylinux2010_x86_64.whl Path to dependency file: /requirements.txt Path to vulnerable library: /requirements.txt Found in...