Skip to content

[VulnerabilityX] Security dependency upgrades — 6 package(s) (2026-07-16) - #59

Open
rajsinghh8 wants to merge 1 commit into
Ramakm:mainfrom
rajsinghh8:vulnerabilityx/security-upgrades-0716_1055
Open

[VulnerabilityX] Security dependency upgrades — 6 package(s) (2026-07-16)#59
rajsinghh8 wants to merge 1 commit into
Ramakm:mainfrom
rajsinghh8:vulnerabilityx/security-upgrades-0716_1055

Conversation

@rajsinghh8

@rajsinghh8 rajsinghh8 commented Jul 16, 2026

Copy link
Copy Markdown

Security Dependency Upgrades

This PR was automatically generated by VulnerabilityX.

⚠️ WARNING: Tests are still failing after automated patching attempts.
Please review the changes carefully before merging.

Upgrades Summary

Package Old Version New Version CVEs Fixed
torch 2.0.0 2.13.0 GHSA-3749-ghw9-m3mg, GHSA-53q9-r3pm-6pq6, GHSA-5pcm-hx3q-hm94, GHSA-887c-mr87-cxwp, GHSA-c678-jfcj-6jmf, GHSA-f4hp-rmr7-r7v8, GHSA-pg7h-5qx3-wjr3, GHSA-qfhq-4f3w-5fph, GHSA-rrmf-rvhw-rf47, GHSA-vgrw-7cvw-pwgx, GHSA-x3gm-94wq-g975, PYSEC-2024-250, PYSEC-2024-251, PYSEC-2024-252, PYSEC-2024-259, PYSEC-2025-191, PYSEC-2025-198, PYSEC-2025-203, PYSEC-2025-204, PYSEC-2025-205, PYSEC-2025-206, PYSEC-2025-207, PYSEC-2025-208, PYSEC-2025-209, PYSEC-2025-41, PYSEC-2026-139, PYSEC-2026-1970, PYSEC-2026-2286, GHSA-4vmg-rw8f-92f9
transformers 4.30.0 5.14.1 GHSA-29pf-2h5f-8g72, GHSA-37mw-44qp-f5jm, GHSA-37q5-v5qm-c9v8, GHSA-3863-2447-669p, GHSA-4w7r-h757-3r74, GHSA-59p9-h35m-wg4g, GHSA-69w3-r845-3855, GHSA-6rvg-6v2m-4j46, GHSA-9356-575x-2w9m, GHSA-fgcw-684q-jj6r, GHSA-fpwr-67px-3qhx, GHSA-hxxf-235m-72v3, GHSA-jjph-296x-mrcr, GHSA-phhr-52qp-3mj4, GHSA-q2wp-rjmx-x6x9, GHSA-qq3j-4f4f-9583, GHSA-qxrp-vhvm-j765, GHSA-rcv9-qm8p-9p6j, GHSA-v68g-wm8c-6x7j, GHSA-wrfc-pvp9-mr9g, PYSEC-2023-300, PYSEC-2023-301, PYSEC-2024-227, PYSEC-2024-228, PYSEC-2024-229, PYSEC-2025-211, PYSEC-2025-212, PYSEC-2025-213, PYSEC-2025-214, PYSEC-2025-215, PYSEC-2025-216, PYSEC-2025-217, PYSEC-2025-218, PYSEC-2025-40, PYSEC-2026-1977, PYSEC-2026-1978, PYSEC-2026-1980, PYSEC-2026-1981, PYSEC-2026-1982, PYSEC-2026-1983, PYSEC-2026-1984, PYSEC-2026-1985, PYSEC-2026-1986, PYSEC-2026-1987, PYSEC-2026-1988, PYSEC-2026-2288, PYSEC-2026-2289, PYSEC-2026-2290
pillow 9.0.0 12.3.0 GHSA-3f63-hfp8-52jq, GHSA-44wm-f244-xhp3, GHSA-8ghj-p4vj-mr35, GHSA-8vj2-vxx3-667w, GHSA-9j59-75qj-795w, GHSA-j7hp-h8jx-5ppr, GHSA-m2vv-5vj5-2hm7, GHSA-r73j-pqj5-w3x7, GHSA-wjx4-4jcj-g98j, PYSEC-2022-168, PYSEC-2022-42979, PYSEC-2022-42980, PYSEC-2023-175, PYSEC-2023-227, PYSEC-2026-165, PYSEC-2026-1793, PYSEC-2026-1794, PYSEC-2026-2253, PYSEC-2026-2254, PYSEC-2026-2255, PYSEC-2026-2256, PYSEC-2026-2257, PYSEC-2026-2874, PYSEC-2026-3451, PYSEC-2026-3453, PYSEC-2026-457, GHSA-56pw-mpj4-fxww
opencv-python 4.7.0 5.0.0.93 GHSA-qr4w-53vh-m672, PYSEC-2023-183
tqdm 4.65.0 4.68.4 GHSA-g7vv-2v7x-gj9p, PYSEC-2026-1976
gradio 3.35.0 6.20.0 GHSA-26jh-r8g2-6fpr, GHSA-279j-x4gx-hfrh, GHSA-34rf-p3r3-58x2, GHSA-37qc-qgx6-9xjv, GHSA-39mp-8hj3-5c49, GHSA-3c67-5hwx-f6wx, GHSA-3gf9-wv65-gwh9, GHSA-48cq-79qq-6f7x, GHSA-4q3c-cj7g-jcwf, GHSA-576c-3j53-r9jj, GHSA-5cpq-9538-jm2j, GHSA-6655-8ph2-63j3, GHSA-6qm2-wpxq-7qh2, GHSA-6v6g-j5fq-hpvw, GHSA-77xq-6g77-h274, GHSA-7hp7-4p35-3cx2, GHSA-7v2w-h4gh-w5cv, GHSA-89v2-pqfv-c5r9, GHSA-8c87-gvhj-xm8m, GHSA-8jw3-6x8j-v96g, GHSA-973g-55hp-3frw, GHSA-f3h9-8phc-6gvh, GHSA-g6c9-f4xm-9j4x, GHSA-g9cj-cfpp-4g2x, GHSA-gqvf-3hgp-5hxv, GHSA-gvv6-33j7-884g, GHSA-hm3c-93pg-4cxw, GHSA-hmx6-r76c-85g9, GHSA-j2jg-fq62-7c3h, GHSA-j757-pf57-f8r4, GHSA-jmh7-g254-2cq9, GHSA-m842-4qm8-7gpq, GHSA-pfjf-5gxr-995x, GHSA-prpg-p95c-32fv, GHSA-qh6x-j82h-vpf9, GHSA-r364-m2j9-mf4h, GHSA-rvfh-h6c7-fc3c, GHSA-xh2x-3mrm-fwqm, PYSEC-2023-249, PYSEC-2023-255, PYSEC-2024-184, PYSEC-2024-196, PYSEC-2024-197, PYSEC-2024-198, PYSEC-2024-199, PYSEC-2024-213, PYSEC-2024-214, PYSEC-2024-215, PYSEC-2024-216, PYSEC-2024-217, PYSEC-2024-218, PYSEC-2024-219, PYSEC-2024-220, PYSEC-2024-255, PYSEC-2024-274, PYSEC-2024-321, PYSEC-2025-118, PYSEC-2026-1407, PYSEC-2026-1408, PYSEC-2026-1409, PYSEC-2026-1410, PYSEC-2026-1411, PYSEC-2026-1413, PYSEC-2026-1414, PYSEC-2026-1415, PYSEC-2026-1416, PYSEC-2026-1418, PYSEC-2026-1419, PYSEC-2026-1420, PYSEC-2026-211, PYSEC-2026-2178, PYSEC-2026-2179, PYSEC-2026-345, PYSEC-2026-64, PYSEC-2026-65, PYSEC-2026-66, GHSA-3f95-mxq2-2f63, GHSA-xcgp-r7r8-2hc9, GHSA-3x9g-xfj5-fq84

Vulnerabilities Fixed

GHSA-3749-ghw9-m3mg (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-53q9-r3pm-6pq6 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-5pcm-hx3q-hm94 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-887c-mr87-cxwp (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-c678-jfcj-6jmf (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-f4hp-rmr7-r7v8 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-pg7h-5qx3-wjr3 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-qfhq-4f3w-5fph (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-rrmf-rvhw-rf47 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-vgrw-7cvw-pwgx (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-x3gm-94wq-g975 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-250 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-251 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-252 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-259 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-191 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-198 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-203 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-204 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-205 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-206 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-207 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-208 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-209 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-41 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-139 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1970 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-2286 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-4vmg-rw8f-92f9 (CRITICAL)

Summary: Withdrawn Advisory: PyTorch deserialization vulnerability
Fixed in: ``
Source: GITHUB

GHSA-29pf-2h5f-8g72 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-37mw-44qp-f5jm (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-37q5-v5qm-c9v8 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-3863-2447-669p (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-4w7r-h757-3r74 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-59p9-h35m-wg4g (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-69w3-r845-3855 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-6rvg-6v2m-4j46 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-9356-575x-2w9m (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-fgcw-684q-jj6r (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-fpwr-67px-3qhx (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-hxxf-235m-72v3 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-jjph-296x-mrcr (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-phhr-52qp-3mj4 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-q2wp-rjmx-x6x9 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-qq3j-4f4f-9583 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-qxrp-vhvm-j765 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-rcv9-qm8p-9p6j (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-v68g-wm8c-6x7j (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-wrfc-pvp9-mr9g (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2023-300 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2023-301 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-227 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-228 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-229 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-211 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-212 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-213 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-214 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-215 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-216 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-217 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-218 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-40 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1977 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1978 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1980 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1981 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1982 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1983 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1984 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1985 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1986 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1987 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1988 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-2288 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-2289 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-2290 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-3f63-hfp8-52jq (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-44wm-f244-xhp3 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-8ghj-p4vj-mr35 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-8vj2-vxx3-667w (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-9j59-75qj-795w (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-j7hp-h8jx-5ppr (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-m2vv-5vj5-2hm7 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-r73j-pqj5-w3x7 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-wjx4-4jcj-g98j (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2022-168 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2022-42979 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2022-42980 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2023-175 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2023-227 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-165 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1793 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1794 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-2253 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-2254 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-2255 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-2256 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-2257 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-2874 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-3451 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-3453 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-457 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-56pw-mpj4-fxww (HIGH)

Summary: Duplicate Advisory: Bundled libwebp in Pillow vulnerable
Fixed in: 10.0.1
Source: GITHUB

GHSA-qr4w-53vh-m672 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2023-183 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-g7vv-2v7x-gj9p (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1976 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-26jh-r8g2-6fpr (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-279j-x4gx-hfrh (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-34rf-p3r3-58x2 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-37qc-qgx6-9xjv (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-39mp-8hj3-5c49 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-3c67-5hwx-f6wx (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-3gf9-wv65-gwh9 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-48cq-79qq-6f7x (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-4q3c-cj7g-jcwf (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-576c-3j53-r9jj (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-5cpq-9538-jm2j (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-6655-8ph2-63j3 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-6qm2-wpxq-7qh2 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-6v6g-j5fq-hpvw (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-77xq-6g77-h274 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-7hp7-4p35-3cx2 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-7v2w-h4gh-w5cv (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-89v2-pqfv-c5r9 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-8c87-gvhj-xm8m (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-8jw3-6x8j-v96g (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-973g-55hp-3frw (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-f3h9-8phc-6gvh (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-g6c9-f4xm-9j4x (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-g9cj-cfpp-4g2x (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-gqvf-3hgp-5hxv (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-gvv6-33j7-884g (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-hm3c-93pg-4cxw (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-hmx6-r76c-85g9 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-j2jg-fq62-7c3h (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-j757-pf57-f8r4 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-jmh7-g254-2cq9 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-m842-4qm8-7gpq (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-pfjf-5gxr-995x (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-prpg-p95c-32fv (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-qh6x-j82h-vpf9 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-r364-m2j9-mf4h (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-rvfh-h6c7-fc3c (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-xh2x-3mrm-fwqm (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2023-249 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2023-255 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-184 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-196 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-197 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-198 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-199 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-213 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-214 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-215 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-216 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-217 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-218 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-219 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-220 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-255 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-274 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2024-321 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2025-118 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1407 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1408 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1409 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1410 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1411 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1413 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1414 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1415 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1416 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1418 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1419 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-1420 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-211 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-2178 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-2179 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-345 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-64 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-65 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

PYSEC-2026-66 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

GHSA-3f95-mxq2-2f63 (HIGH)

Summary: Duplicate Advisory: Gradio Local File Inclusion vulnerability
Fixed in: 4.19.2
Source: GITHUB

GHSA-xcgp-r7r8-2hc9 (HIGH)

Summary: Gradio's CI vulnerable to Command Injection
Fixed in: 4.18.0
Source: GITHUB

GHSA-3x9g-xfj5-fq84 (MODERATE)

Summary: Duplicate Advisory: Cross-Site Request Forgery in Gradio
Fixed in: 4.19.2
Source: GITHUB

Verification

  • Tests: ❌ FAILED (import-check)
Test output 
Import check failed — 17 file(s) have errors after the upgrade:

[import] demo/app.py:
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/app/C:\libx/vulnerabilityx_Deepseek-OCR_0716_1055_7b3d88/demo/app.py", line 12, in <module>
    import torch
ModuleNotFoundError: No module named 'torch'

[import] evaluation/evaluate_ocr.py:
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/app/C:\libx/vulnerabilityx_Deepseek-OCR_0716_1055_7b3d88/evaluation/evaluate_ocr.py", line 15, in <module>
    import torch
ModuleNotFoundError: No module
  • Lint: ✅ PASSED

Generated by VulnerabilityX

root
[VulnerabilityX] Security dependency upgrades + code migration
608c2de 
- torch: 2.0.0 → 2.13.0 (GHSA-3749-ghw9-m3mg, GHSA-53q9-r3pm-6pq6, GHSA-5pcm-hx3q-hm94, GHSA-887c-mr87-cxwp, GHSA-c678-jfcj-6jmf, GHSA-f4hp-rmr7-r7v8, GHSA-pg7h-5qx3-wjr3, GHSA-qfhq-4f3w-5fph, GHSA-rrmf-rvhw-rf47, GHSA-vgrw-7cvw-pwgx, GHSA-x3gm-94wq-g975, PYSEC-2024-250, PYSEC-2024-251, PYSEC-2024-252, PYSEC-2024-259, PYSEC-2025-191, PYSEC-2025-198, PYSEC-2025-203, PYSEC-2025-204, PYSEC-2025-205, PYSEC-2025-206, PYSEC-2025-207, PYSEC-2025-208, PYSEC-2025-209, PYSEC-2025-41, PYSEC-2026-139, PYSEC-2026-1970, PYSEC-2026-2286, GHSA-4vmg-rw8f-92f9)
- transformers: 4.30.0 → 5.14.1 (GHSA-29pf-2h5f-8g72, GHSA-37mw-44qp-f5jm, GHSA-37q5-v5qm-c9v8, GHSA-3863-2447-669p, GHSA-4w7r-h757-3r74, GHSA-59p9-h35m-wg4g, GHSA-69w3-r845-3855, GHSA-6rvg-6v2m-4j46, GHSA-9356-575x-2w9m, GHSA-fgcw-684q-jj6r, GHSA-fpwr-67px-3qhx, GHSA-hxxf-235m-72v3, GHSA-jjph-296x-mrcr, GHSA-phhr-52qp-3mj4, GHSA-q2wp-rjmx-x6x9, GHSA-qq3j-4f4f-9583, GHSA-qxrp-vhvm-j765, GHSA-rcv9-qm8p-9p6j, GHSA-v68g-wm8c-6x7j, GHSA-wrfc-pvp9-mr9g, PYSEC-2023-300, PYSEC-2023-301, PYSEC-2024-227, PYSEC-2024-228, PYSEC-2024-229, PYSEC-2025-211, PYSEC-2025-212, PYSEC-2025-213, PYSEC-2025-214, PYSEC-2025-215, PYSEC-2025-216, PYSEC-2025-217, PYSEC-2025-218, PYSEC-2025-40, PYSEC-2026-1977, PYSEC-2026-1978, PYSEC-2026-1980, PYSEC-2026-1981, PYSEC-2026-1982, PYSEC-2026-1983, PYSEC-2026-1984, PYSEC-2026-1985, PYSEC-2026-1986, PYSEC-2026-1987, PYSEC-2026-1988, PYSEC-2026-2288, PYSEC-2026-2289, PYSEC-2026-2290)
- pillow: 9.0.0 → 12.3.0 (GHSA-3f63-hfp8-52jq, GHSA-44wm-f244-xhp3, GHSA-8ghj-p4vj-mr35, GHSA-8vj2-vxx3-667w, GHSA-9j59-75qj-795w, GHSA-j7hp-h8jx-5ppr, GHSA-m2vv-5vj5-2hm7, GHSA-r73j-pqj5-w3x7, GHSA-wjx4-4jcj-g98j, PYSEC-2022-168, PYSEC-2022-42979, PYSEC-2022-42980, PYSEC-2023-175, PYSEC-2023-227, PYSEC-2026-165, PYSEC-2026-1793, PYSEC-2026-1794, PYSEC-2026-2253, PYSEC-2026-2254, PYSEC-2026-2255, PYSEC-2026-2256, PYSEC-2026-2257, PYSEC-2026-2874, PYSEC-2026-3451, PYSEC-2026-3453, PYSEC-2026-457, GHSA-56pw-mpj4-fxww)
- opencv-python: 4.7.0 → 5.0.0.93 (GHSA-qr4w-53vh-m672, PYSEC-2023-183)
- tqdm: 4.65.0 → 4.68.4 (GHSA-g7vv-2v7x-gj9p, PYSEC-2026-1976)
- gradio: 3.35.0 → 6.20.0 (GHSA-26jh-r8g2-6fpr, GHSA-279j-x4gx-hfrh, GHSA-34rf-p3r3-58x2, GHSA-37qc-qgx6-9xjv, GHSA-39mp-8hj3-5c49, GHSA-3c67-5hwx-f6wx, GHSA-3gf9-wv65-gwh9, GHSA-48cq-79qq-6f7x, GHSA-4q3c-cj7g-jcwf, GHSA-576c-3j53-r9jj, GHSA-5cpq-9538-jm2j, GHSA-6655-8ph2-63j3, GHSA-6qm2-wpxq-7qh2, GHSA-6v6g-j5fq-hpvw, GHSA-77xq-6g77-h274, GHSA-7hp7-4p35-3cx2, GHSA-7v2w-h4gh-w5cv, GHSA-89v2-pqfv-c5r9, GHSA-8c87-gvhj-xm8m, GHSA-8jw3-6x8j-v96g, GHSA-973g-55hp-3frw, GHSA-f3h9-8phc-6gvh, GHSA-g6c9-f4xm-9j4x, GHSA-g9cj-cfpp-4g2x, GHSA-gqvf-3hgp-5hxv, GHSA-gvv6-33j7-884g, GHSA-hm3c-93pg-4cxw, GHSA-hmx6-r76c-85g9, GHSA-j2jg-fq62-7c3h, GHSA-j757-pf57-f8r4, GHSA-jmh7-g254-2cq9, GHSA-m842-4qm8-7gpq, GHSA-pfjf-5gxr-995x, GHSA-prpg-p95c-32fv, GHSA-qh6x-j82h-vpf9, GHSA-r364-m2j9-mf4h, GHSA-rvfh-h6c7-fc3c, GHSA-xh2x-3mrm-fwqm, PYSEC-2023-249, PYSEC-2023-255, PYSEC-2024-184, PYSEC-2024-196, PYSEC-2024-197, PYSEC-2024-198, PYSEC-2024-199, PYSEC-2024-213, PYSEC-2024-214, PYSEC-2024-215, PYSEC-2024-216, PYSEC-2024-217, PYSEC-2024-218, PYSEC-2024-219, PYSEC-2024-220, PYSEC-2024-255, PYSEC-2024-274, PYSEC-2024-321, PYSEC-2025-118, PYSEC-2026-1407, PYSEC-2026-1408, PYSEC-2026-1409, PYSEC-2026-1410, PYSEC-2026-1411, PYSEC-2026-1413, PYSEC-2026-1414, PYSEC-2026-1415, PYSEC-2026-1416, PYSEC-2026-1418, PYSEC-2026-1419, PYSEC-2026-1420, PYSEC-2026-211, PYSEC-2026-2178, PYSEC-2026-2179, PYSEC-2026-345, PYSEC-2026-64, PYSEC-2026-65, PYSEC-2026-66, GHSA-3f95-mxq2-2f63, GHSA-xcgp-r7r8-2hc9, GHSA-3x9g-xfj5-fq84)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rajsinghh8