Skip to content

VULN UPGRADE: minor upgrades — 4 packages (minor: 3 · patch: 1) - #12

Closed
campaigner-prod[bot] wants to merge 1 commit into
devfrom
engraver-auto-version-upgrade/minorpatch/poetry/2-1770972164
Closed

VULN UPGRADE: minor upgrades — 4 packages (minor: 3 · patch: 1) #12
campaigner-prod[bot] wants to merge 1 commit into
devfrom
engraver-auto-version-upgrade/minorpatch/poetry/2-1770972164

Conversation

@campaigner-prod

Copy link
Copy Markdown

Summary: Security update — 4 packages upgraded (MINOR changes included)

Manifests changed:

  • . (poetry)

Updates

Package From To Type Vulnerabilities Fixed
marshmallow 3.22.0 3.26.2 minor 2 MODERATE
Flask 3.0.3 3.1.2 minor -
mock 5.1.0 5.2.0 minor -
pytest 8.3.2 8.3.5 patch -

Packages marked with "-" are updated due to dependency constraints.


Security Details

ℹ️ Other Vulnerabilities (2)
Package CVE Severity Summary Unsafe Version Fixed In
marshmallow GHSA-428g-f7cq-pgp5 MODERATE Marshmallow has DoS in Schema.load(many) 3.22.0 3.26.2
marshmallow CVE-2025-68480 MODERATE Marshmallow has DoS in Schema.load(many) 3.22.0 -

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI

Update Mode: Vulnerability Remediation

🤖 Generated by DataDog Automated Dependency Management System

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants