Skip to content

Commit a750891

Browse files
osv-robotosv-robot
authored
test: update snapshots (#2535)
The snapshots have changed, probably due to OSV advisories being changed. Please review the differences to make sure that they're expected!
1 parent 8160502 commit a750891

File tree

4 files changed

+380
-55
lines changed

4 files changed

+380
-55
lines changed

‎cmd/osv-scanner/fix/__snapshots__/command_test.snap‎

Lines changed: 87 additions & 46 deletions
Original file line numberDiff line numberDiff line change
@@ -5260,12 +5260,13 @@ unsupported strategy "force" - must be one of: in-place, relax, override
52605260

52615261
[TestCommand/fix_non-interactive_in-place_package-lock.json - 1]
52625262
Scanning <tempdir>/package-lock.json...
5263-
Found 11 vulnerabilities matching the filter
5264-
Can fix 3/11 matching vulnerabilities by changing 3 dependencies
5263+
Found 12 vulnerabilities matching the filter
5264+
Can fix 4/12 matching vulnerabilities by changing 4 dependencies
5265+
UPGRADED-PACKAGE: ajv,6.12.6,6.14.0
52655266
UPGRADED-PACKAGE: brace-expansion,1.1.11,1.1.12
52665267
UPGRADED-PACKAGE: concat-stream,1.5.0,1.6.1
52675268
UPGRADED-PACKAGE: hosted-git-info,2.1.4,2.8.9
5268-
FIXED-VULN-IDS: GHSA-43f8-2h32-f4cj,GHSA-g74r-ffvr-5q9f,GHSA-v6h2-p8h4-qcjw
5269+
FIXED-VULN-IDS: GHSA-2g4f-4pwh-qvx6,GHSA-43f8-2h32-f4cj,GHSA-g74r-ffvr-5q9f,GHSA-v6h2-p8h4-qcjw
52695270
REMAINING-VULNS: 8
52705271
UNFIXABLE-VULNS: 8
52715272
Rewriting <tempdir>/package-lock.json...
@@ -5292,9 +5293,9 @@ Rewriting <tempdir>/package-lock.json...
52925293
}
52935294
},
52945295
"node_modules/ajv": {
5295-
"version": "6.12.6",
5296-
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
5297-
"integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
5296+
"version": "6.14.0",
5297+
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
5298+
"integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
52985299
"dependencies": {
52995300
"fast-deep-equal": "^3.1.1",
53005301
"fast-json-stable-stringify": "^2.0.0",
@@ -6230,9 +6231,9 @@ Rewriting <tempdir>/package-lock.json...
62306231
},
62316232
"dependencies": {
62326233
"ajv": {
6233-
"version": "6.12.6",
6234-
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
6235-
"integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
6234+
"version": "6.14.0",
6235+
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
6236+
"integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
62366237
"requires": {
62376238
"fast-deep-equal": "^3.1.1",
62386239
"fast-json-stable-stringify": "^2.0.0",
@@ -7015,6 +7016,15 @@ Rewriting <tempdir>/package-lock.json...
70157016
"name": "ajv",
70167017
"version": "6.12.6"
70177018
}
7019+
]
7020+
},
7021+
{
7022+
"id": "GHSA-3ppc-4f35-3m26",
7023+
"packages": [
7024+
{
7025+
"name": "minimatch",
7026+
"version": "3.1.2"
7027+
}
70187028
],
70197029
"unactionable": true
70207030
},
@@ -7117,6 +7127,27 @@ Rewriting <tempdir>/package-lock.json...
71177127
}
71187128
],
71197129
"patches": [
7130+
{
7131+
"packageUpdates": [
7132+
{
7133+
"name": "ajv",
7134+
"versionFrom": "6.12.6",
7135+
"versionTo": "6.14.0",
7136+
"transitive": true
7137+
}
7138+
],
7139+
"fixed": [
7140+
{
7141+
"id": "GHSA-2g4f-4pwh-qvx6",
7142+
"packages": [
7143+
{
7144+
"name": "ajv",
7145+
"version": "6.12.6"
7146+
}
7147+
]
7148+
}
7149+
]
7150+
},
71207151
{
71217152
"packageUpdates": [
71227153
{
@@ -7207,9 +7238,9 @@ Rewriting <tempdir>/package-lock.json...
72077238
}
72087239
},
72097240
"node_modules/ajv": {
7210-
"version": "6.12.6",
7211-
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
7212-
"integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
7241+
"version": "6.14.0",
7242+
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
7243+
"integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
72137244
"dependencies": {
72147245
"fast-deep-equal": "^3.1.1",
72157246
"fast-json-stable-stringify": "^2.0.0",
@@ -8145,9 +8176,9 @@ Rewriting <tempdir>/package-lock.json...
81458176
},
81468177
"dependencies": {
81478178
"ajv": {
8148-
"version": "6.12.6",
8149-
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
8150-
"integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
8179+
"version": "6.14.0",
8180+
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
8181+
"integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
81518182
"requires": {
81528183
"fast-deep-equal": "^3.1.1",
81538184
"fast-json-stable-stringify": "^2.0.0",
@@ -9255,14 +9286,13 @@ Rewriting <tempdir>/pom.xml...
92559286
"strategy": "relax",
92569287
"vulnerabilities": [
92579288
{
9258-
"id": "GHSA-2g4f-4pwh-qvx6",
9289+
"id": "GHSA-3ppc-4f35-3m26",
92599290
"packages": [
92609291
{
9261-
"name": "ajv",
9262-
"version": "6.12.6"
9292+
"name": "minimatch",
9293+
"version": "3.1.3"
92639294
}
9264-
],
9265-
"unactionable": true
9295+
]
92669296
},
92679297
{
92689298
"id": "GHSA-43f8-2h32-f4cj",
@@ -9343,6 +9373,15 @@ Rewriting <tempdir>/pom.xml...
93439373
}
93449374
],
93459375
"fixed": [
9376+
{
9377+
"id": "GHSA-3ppc-4f35-3m26",
9378+
"packages": [
9379+
{
9380+
"name": "minimatch",
9381+
"version": "3.1.3"
9382+
}
9383+
]
9384+
},
93469385
{
93479386
"id": "GHSA-43f8-2h32-f4cj",
93489387
"packages": [
@@ -9471,11 +9510,11 @@ Rewriting <tempdir>/pom.xml...
94719510
[TestCommand/fix_non-interactive_relax_package.json - 1]
94729511
Resolving <tempdir>/package.json...
94739512
Found 8 vulnerabilities matching the filter
9474-
Can fix 3/8 matching vulnerabilities by changing 1 dependencies
9513+
Can fix 4/8 matching vulnerabilities by changing 1 dependencies
94759514
UPGRADED-PACKAGE: npm-registry-client,6.2.0,^7.5.0
9476-
FIXED-VULN-IDS: GHSA-43f8-2h32-f4cj,GHSA-c2qf-rxjj-qqgw,GHSA-c6rq-rjc2-86v2
9477-
REMAINING-VULNS: 5
9478-
UNFIXABLE-VULNS: 5
9515+
FIXED-VULN-IDS: GHSA-3ppc-4f35-3m26,GHSA-43f8-2h32-f4cj,GHSA-c2qf-rxjj-qqgw,GHSA-c6rq-rjc2-86v2
9516+
REMAINING-VULNS: 4
9517+
UNFIXABLE-VULNS: 4
94799518
Rewriting <tempdir>/package.json...
94809519

94819520
---
@@ -9504,12 +9543,13 @@ Rewriting <tempdir>/package.json...
95049543

95059544
[TestCommand/fix_non_interactive_in_place_package_lock_json_with_native_data_source - 1]
95069545
Scanning <tempdir>/package-lock.json...
9507-
Found 11 vulnerabilities matching the filter
9508-
Can fix 3/11 matching vulnerabilities by changing 3 dependencies
9546+
Found 12 vulnerabilities matching the filter
9547+
Can fix 4/12 matching vulnerabilities by changing 4 dependencies
9548+
UPGRADED-PACKAGE: ajv,6.12.6,6.14.0
95099549
UPGRADED-PACKAGE: brace-expansion,1.1.11,1.1.12
95109550
UPGRADED-PACKAGE: concat-stream,1.5.0,1.6.1
95119551
UPGRADED-PACKAGE: hosted-git-info,2.1.4,2.8.9
9512-
FIXED-VULN-IDS: GHSA-43f8-2h32-f4cj,GHSA-g74r-ffvr-5q9f,GHSA-v6h2-p8h4-qcjw
9552+
FIXED-VULN-IDS: GHSA-2g4f-4pwh-qvx6,GHSA-43f8-2h32-f4cj,GHSA-g74r-ffvr-5q9f,GHSA-v6h2-p8h4-qcjw
95139553
REMAINING-VULNS: 8
95149554
UNFIXABLE-VULNS: 8
95159555
Rewriting <tempdir>/package-lock.json...
@@ -9536,9 +9576,9 @@ Rewriting <tempdir>/package-lock.json...
95369576
}
95379577
},
95389578
"node_modules/ajv": {
9539-
"version": "6.12.6",
9540-
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
9541-
"integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
9579+
"version": "6.14.0",
9580+
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
9581+
"integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
95429582
"dependencies": {
95439583
"fast-deep-equal": "^3.1.1",
95449584
"fast-json-stable-stringify": "^2.0.0",
@@ -10474,9 +10514,9 @@ Rewriting <tempdir>/package-lock.json...
1047410514
},
1047510515
"dependencies": {
1047610516
"ajv": {
10477-
"version": "6.12.6",
10478-
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
10479-
"integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
10517+
"version": "6.14.0",
10518+
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
10519+
"integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
1048010520
"requires": {
1048110521
"fast-deep-equal": "^3.1.1",
1048210522
"fast-json-stable-stringify": "^2.0.0",
@@ -11325,12 +11365,13 @@ manifest or lockfile is required
1132511365
[TestCommand_OfflineDatabase/fix_non_interactive_in_place_package_lock_json_with_offline_vulns - 1]
1132611366
Loaded npm local db from <tempdir>/osv-scanner/npm/all.zip
1132711367
Scanning <tempdir>/package-lock.json...
11328-
Found 11 vulnerabilities matching the filter
11329-
Can fix 3/11 matching vulnerabilities by changing 3 dependencies
11368+
Found 12 vulnerabilities matching the filter
11369+
Can fix 4/12 matching vulnerabilities by changing 4 dependencies
11370+
UPGRADED-PACKAGE: ajv,6.12.6,6.14.0
1133011371
UPGRADED-PACKAGE: brace-expansion,1.1.11,1.1.12
1133111372
UPGRADED-PACKAGE: concat-stream,1.5.0,1.6.1
1133211373
UPGRADED-PACKAGE: hosted-git-info,2.1.4,2.8.9
11333-
FIXED-VULN-IDS: GHSA-43f8-2h32-f4cj,GHSA-g74r-ffvr-5q9f,GHSA-v6h2-p8h4-qcjw
11374+
FIXED-VULN-IDS: GHSA-2g4f-4pwh-qvx6,GHSA-43f8-2h32-f4cj,GHSA-g74r-ffvr-5q9f,GHSA-v6h2-p8h4-qcjw
1133411375
REMAINING-VULNS: 8
1133511376
UNFIXABLE-VULNS: 8
1133611377
Rewriting <tempdir>/package-lock.json...
@@ -11357,9 +11398,9 @@ Rewriting <tempdir>/package-lock.json...
1135711398
}
1135811399
},
1135911400
"node_modules/ajv": {
11360-
"version": "6.12.6",
11361-
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
11362-
"integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
11401+
"version": "6.14.0",
11402+
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
11403+
"integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
1136311404
"dependencies": {
1136411405
"fast-deep-equal": "^3.1.1",
1136511406
"fast-json-stable-stringify": "^2.0.0",
@@ -12295,9 +12336,9 @@ Rewriting <tempdir>/package-lock.json...
1229512336
},
1229612337
"dependencies": {
1229712338
"ajv": {
12298-
"version": "6.12.6",
12299-
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
12300-
"integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
12339+
"version": "6.14.0",
12340+
"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
12341+
"integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
1230112342
"requires": {
1230212343
"fast-deep-equal": "^3.1.1",
1230312344
"fast-json-stable-stringify": "^2.0.0",
@@ -13071,11 +13112,11 @@ Rewriting <tempdir>/package-lock.json...
1307113112
Loaded npm local db from <tempdir>/osv-scanner/npm/all.zip
1307213113
Resolving <tempdir>/package.json...
1307313114
Found 8 vulnerabilities matching the filter
13074-
Can fix 3/8 matching vulnerabilities by changing 1 dependencies
13115+
Can fix 4/8 matching vulnerabilities by changing 1 dependencies
1307513116
UPGRADED-PACKAGE: npm-registry-client,6.2.0,^7.5.0
13076-
FIXED-VULN-IDS: GHSA-43f8-2h32-f4cj,GHSA-c2qf-rxjj-qqgw,GHSA-c6rq-rjc2-86v2
13077-
REMAINING-VULNS: 5
13078-
UNFIXABLE-VULNS: 5
13117+
FIXED-VULN-IDS: GHSA-3ppc-4f35-3m26,GHSA-43f8-2h32-f4cj,GHSA-c2qf-rxjj-qqgw,GHSA-c6rq-rjc2-86v2
13118+
REMAINING-VULNS: 4
13119+
UNFIXABLE-VULNS: 4
1307913120
Rewriting <tempdir>/package.json...
1308013121

1308113122
---

‎cmd/osv-scanner/scan/image/__snapshots__/command_test.snap‎

Lines changed: 12 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ Checking if docker image ("alpine:non-existent-tag") exists locally...
77
[TestCommand_Docker/Fake_alpine_image - 2]
88
Docker command exited with code ("/usr/bin/docker pull -q alpine:non-existent-tag"): 1
99
STDERR:
10-
> Error response from daemon: failed to resolve reference "docker.io/library/alpine:non-existent-tag": docker.io/library/alpine:non-existent-tag: not found
10+
> Error response from daemon: manifest for alpine:non-existent-tag not found: manifest unknown: manifest unknown
1111
failed to pull container image: failed to run docker command
1212

1313
---
@@ -20,7 +20,7 @@ Checking if docker image ("this-image-definitely-does-not-exist-abcde:with-tag")
2020
[TestCommand_Docker/Fake_image_entirely - 2]
2121
Docker command exited with code ("/usr/bin/docker pull -q this-image-definitely-does-not-exist-abcde:with-tag"): 1
2222
STDERR:
23-
> Error response from daemon: pull access denied for this-image-definitely-does-not-exist-abcde, repository does not exist or may require 'docker login'
23+
> Error response from daemon: pull access denied for this-image-definitely-does-not-exist-abcde, repository does not exist or may require 'docker login': denied: requested access to the resource is denied
2424
failed to pull container image: failed to run docker command
2525

2626
---
@@ -2577,7 +2577,7 @@ Scanning local image tarball "./testdata/test-go-binary.tar"
25772577
"diff_id": "sha256:...",
25782578
"command": "/bin/sh -c #(nop) ADD file:c5377eaa926bf412dd8d4a08b0a1f2399cfd708743533b0aa03b53d14cb4bb4e in / ",
25792579
"is_empty": false,
2580-
"base_image_index": 1
2580+
"base_image_index": 2
25812581
},
25822582
{
25832583
"diff_id": "",
@@ -2600,6 +2600,10 @@ Scanning local image tarball "./testdata/test-go-binary.tar"
26002600
],
26012601
"base_images": [
26022602
{},
2603+
{
2604+
"name": "alpine",
2605+
"tags": null
2606+
},
26032607
{
26042608
"name": "alpine",
26052609
"tags": null
@@ -2677,7 +2681,7 @@ Scanning local image tarball "./testdata/test-alpine-etcshadow.tar"
26772681
"diff_id": "sha256:...",
26782682
"command": "/bin/sh -c #(nop) ADD file:c5377eaa926bf412dd8d4a08b0a1f2399cfd708743533b0aa03b53d14cb4bb4e in / ",
26792683
"is_empty": false,
2680-
"base_image_index": 1
2684+
"base_image_index": 2
26812685
},
26822686
{
26832687
"diff_id": "",
@@ -2700,6 +2704,10 @@ Scanning local image tarball "./testdata/test-alpine-etcshadow.tar"
27002704
],
27012705
"base_images": [
27022706
{},
2707+
{
2708+
"name": "alpine",
2709+
"tags": null
2710+
},
27032711
{
27042712
"name": "alpine",
27052713
"tags": null

‎cmd/osv-scanner/scan/source/__snapshots__/command_test.snap‎

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1881,7 +1881,7 @@ Total 0 packages affected by 0 known vulnerabilities (0 Critical, 0 High, 0 Medi
18811881
Scanned <rootdir>/testdata/locks-git/osv-scanner.json file and found 11 packages
18821882
Loaded GIT local db from <tempdir>/osv-scanner/GIT/all.zip
18831883
Skipping commit scanning for: 45fda76bc1b9fd74d10e85e0ce9b65a12dcc58b0
1884-
Total 8 packages affected by 27 known vulnerabilities (5 Critical, 6 High, 10 Medium, 0 Low, 6 Unknown) from 1 ecosystem.
1884+
Total 8 packages affected by 29 known vulnerabilities (5 Critical, 7 High, 11 Medium, 0 Low, 6 Unknown) from 1 ecosystem.
18851885
0 vulnerabilities can be fixed.
18861886

18871887

@@ -1897,8 +1897,10 @@ Total 8 packages affected by 27 known vulnerabilities (5 Critical, 6 High, 10 Me
18971897
| https://osv.dev/CVE-2024-51757 | 9.3 | GIT | https://github.com/capricorn86/happy-dom.git@f8221103 | -- | testdata/locks-git/osv-scanner.json |
18981898
| https://osv.dev/CVE-2025-61927 | 7.2 | GIT | https://github.com/capricorn86/happy-dom.git@f8221103 | -- | testdata/locks-git/osv-scanner.json |
18991899
| https://osv.dev/CVE-2025-62410 | 9.4 | GIT | https://github.com/capricorn86/happy-dom.git@f8221103 | -- | testdata/locks-git/osv-scanner.json |
1900+
| https://osv.dev/CVE-2016-2183 | 7.5 | GIT | https://github.com/openssl/openssl@aea7aaf2 | -- | testdata/locks-git/osv-scanner.json |
19001901
| https://osv.dev/CVE-2025-11187 | 6.1 | GIT | https://github.com/openssl/openssl@aea7aaf2 | -- | testdata/locks-git/osv-scanner.json |
19011902
| https://osv.dev/CVE-2025-15467 | 9.8 | GIT | https://github.com/openssl/openssl@aea7aaf2 | -- | testdata/locks-git/osv-scanner.json |
1903+
| https://osv.dev/CVE-2025-15468 | 5.9 | GIT | https://github.com/openssl/openssl@aea7aaf2 | -- | testdata/locks-git/osv-scanner.json |
19021904
| https://osv.dev/CVE-2025-15469 | 5.5 | GIT | https://github.com/openssl/openssl@aea7aaf2 | -- | testdata/locks-git/osv-scanner.json |
19031905
| https://osv.dev/CVE-2025-4575 | 6.5 | GIT | https://github.com/openssl/openssl@aea7aaf2 | -- | testdata/locks-git/osv-scanner.json |
19041906
| https://osv.dev/CVE-2025-66199 | 5.9 | GIT | https://github.com/openssl/openssl@aea7aaf2 | -- | testdata/locks-git/osv-scanner.json |
@@ -5307,8 +5309,8 @@ Total 3 packages affected by 11 known vulnerabilities (1 Critical, 4 High, 6 Med
53075309
Scanning dir ./testdata/locks-requirements/requirements.txt
53085310
Scanned <rootdir>/testdata/locks-requirements/requirements.txt file and found 3 packages
53095311
Loaded PyPI local db from <tempdir>/osv-scanner/PyPI/all.zip
5310-
Total 3 packages affected by 11 known vulnerabilities (1 Critical, 4 High, 6 Medium, 0 Low, 0 Unknown) from 1 ecosystem.
5311-
11 vulnerabilities can be fixed.
5312+
Total 3 packages affected by 12 known vulnerabilities (1 Critical, 4 High, 6 Medium, 1 Low, 0 Unknown) from 1 ecosystem.
5313+
12 vulnerabilities can be fixed.
53125314

53135315

53145316
+-------------------------------------+------+-----------+----------+---------+---------------+----------------------------------------------+
@@ -5322,6 +5324,7 @@ Total 3 packages affected by 11 known vulnerabilities (1 Critical, 4 High, 6 Med
53225324
| https://osv.dev/GHSA-frmv-pr5f-9mcr | 9.1 | PyPI | django | 1.11.29 | 4.2.26 | testdata/locks-requirements/requirements.txt |
53235325
| https://osv.dev/GHSA-qw25-v68c-qjf3 | 7.5 | PyPI | django | 1.11.29 | 4.2.26 | testdata/locks-requirements/requirements.txt |
53245326
| https://osv.dev/GHSA-rrqc-c2jx-6jgv | 6.3 | PyPI | django | 1.11.29 | 4.2.16 | testdata/locks-requirements/requirements.txt |
5327+
| https://osv.dev/GHSA-68rp-wp8r-4726 | 2.3 | PyPI | flask | 1.0.0 | 3.1.3 | testdata/locks-requirements/requirements.txt |
53255328
| https://osv.dev/GHSA-m2qf-hxjv-5gpq | 8.7 | PyPI | flask | 1.0.0 | 2.2.5 | testdata/locks-requirements/requirements.txt |
53265329
| https://osv.dev/PYSEC-2023-74 | 6.1 | PyPI | requests | 2.20.0 | 2.31.0 | testdata/locks-requirements/requirements.txt |
53275330
| https://osv.dev/GHSA-j8r2-6x86-q33q | | | | | | |
@@ -5607,8 +5610,8 @@ No package sources found, --help for usage information.
56075610
[TestCommand_Transitive/uses_native_data_source_for_requirements.txt - 1]
56085611
Scanning dir ./testdata/locks-requirements/requirements.txt
56095612
Scanned <rootdir>/testdata/locks-requirements/requirements.txt file and found 3 packages
5610-
Total 5 packages affected by 21 known vulnerabilities (1 Critical, 9 High, 10 Medium, 0 Low, 1 Unknown) from 1 ecosystem.
5611-
21 vulnerabilities can be fixed.
5613+
Total 5 packages affected by 22 known vulnerabilities (1 Critical, 9 High, 10 Medium, 1 Low, 1 Unknown) from 1 ecosystem.
5614+
22 vulnerabilities can be fixed.
56125615

56135616

56145617
+-------------------------------------+------+-----------+----------+---------+---------------+----------------------------------------------+
@@ -5624,6 +5627,7 @@ Total 5 packages affected by 21 known vulnerabilities (1 Critical, 9 High, 10 Me
56245627
| https://osv.dev/GHSA-rrqc-c2jx-6jgv | 6.3 | PyPI | django | 1.11.29 | 4.2.16 | testdata/locks-requirements/requirements.txt |
56255628
| https://osv.dev/PYSEC-2023-62 | 8.7 | PyPI | flask | 1.0 | 2.2.5 | testdata/locks-requirements/requirements.txt |
56265629
| https://osv.dev/GHSA-m2qf-hxjv-5gpq | | | | | | |
5630+
| https://osv.dev/GHSA-68rp-wp8r-4726 | 2.3 | PyPI | flask | 1.0 | 3.1.3 | testdata/locks-requirements/requirements.txt |
56275631
| https://osv.dev/PYSEC-2023-74 | 6.1 | PyPI | requests | 2.20.0 | 2.31.0 | testdata/locks-requirements/requirements.txt |
56285632
| https://osv.dev/GHSA-j8r2-6x86-q33q | | | | | | |
56295633
| https://osv.dev/GHSA-9hjg-9r4m-mvj7 | 5.3 | PyPI | requests | 2.20.0 | 2.32.4 | testdata/locks-requirements/requirements.txt |

0 commit comments

Comments
 (0)