Skip to content

[VulnerabilityX] Security dependency upgrades — 1 package(s) (2026-07-20) - #66

Open
raghavmehrotra-art wants to merge 8 commits into
Ramakm:mainfrom
raghavmehrotra-art:vulnerabilityx/security-upgrades-0720_0633
Open

[VulnerabilityX] Security dependency upgrades — 1 package(s) (2026-07-20)#66
raghavmehrotra-art wants to merge 8 commits into
Ramakm:mainfrom
raghavmehrotra-art:vulnerabilityx/security-upgrades-0720_0633

Conversation

@raghavmehrotra-art

Copy link
Copy Markdown

Security Dependency Upgrades

This PR was automatically generated by VulnerabilityX.

ℹ️ Note: Pre-existing test failure(s) unrelated to this upgrade remain (already failing before these changes) — nothing new broke, so no automated patching was attempted.

Upgrades Summary

Package Old Version New Version CVEs Fixed
torch 2.12.1 2.13.0 GHSA-rrmf-rvhw-rf47

Vulnerabilities Fixed

GHSA-rrmf-rvhw-rf47 (UNKNOWN)

Summary:
Fixed in: ``
Source: OSV

Verification

  • Tests: ❌ FAILED (/tmp/vulnerabilityx_Deepseek-OCR_0720_0633_c405c8/.vulnerabilityx_venv/bin/python -m pytest --tb=short -v)
Test output
============================= test session starts ==============================
platform linux -- Python 3.12.13, pytest-9.1.1, pluggy-1.6.0 -- /tmp/vulnerabilityx_Deepseek-OCR_0720_0633_c405c8/.vulnerabilityx_venv/bin/python
cachedir: .pytest_cache
rootdir: /tmp/vulnerabilityx_Deepseek-OCR_0720_0633_c405c8
plugins: anyio-4.14.2
collecting ... collected 29 items

tests/test_image_io.py::TestModeConfigs::test_all_modes_present PASSED   [  3%]
tests/test_image_io.py::TestModeConfigs::test_mode_keys PASSED           [  6%]
tests/test_image_io.py::TestModeConfigs::test_pad_flag_base_large PASSED
  • Lint: ✅ PASSED

Generated by VulnerabilityX

rajsinghh8 and others added 8 commits July 7, 2026 14:15
- torch: 2.0.0 → 2.12.1 (GHSA-3749-ghw9-m3mg, GHSA-53q9-r3pm-6pq6, GHSA-5pcm-hx3q-hm94, GHSA-887c-mr87-cxwp, GHSA-c678-jfcj-6jmf, GHSA-f4hp-rmr7-r7v8, GHSA-pg7h-5qx3-wjr3, GHSA-qfhq-4f3w-5fph, GHSA-rrmf-rvhw-rf47, GHSA-vgrw-7cvw-pwgx, GHSA-x3gm-94wq-g975, PYSEC-2024-250, PYSEC-2024-251, PYSEC-2024-252, PYSEC-2024-259, PYSEC-2025-191, PYSEC-2025-198, PYSEC-2025-203, PYSEC-2025-204, PYSEC-2025-205, PYSEC-2025-206, PYSEC-2025-207, PYSEC-2025-208, PYSEC-2025-209, PYSEC-2025-41, PYSEC-2026-139, GHSA-4vmg-rw8f-92f9)
- transformers: 4.30.0 → 5.13.0 (GHSA-29pf-2h5f-8g72, GHSA-37mw-44qp-f5jm, GHSA-37q5-v5qm-c9v8, GHSA-3863-2447-669p, GHSA-4w7r-h757-3r74, GHSA-59p9-h35m-wg4g, GHSA-69w3-r845-3855, GHSA-6rvg-6v2m-4j46, GHSA-9356-575x-2w9m, GHSA-fpwr-67px-3qhx, GHSA-hxxf-235m-72v3, GHSA-jjph-296x-mrcr, GHSA-phhr-52qp-3mj4, GHSA-q2wp-rjmx-x6x9, GHSA-qq3j-4f4f-9583, GHSA-qxrp-vhvm-j765, GHSA-rcv9-qm8p-9p6j, GHSA-v68g-wm8c-6x7j, GHSA-wrfc-pvp9-mr9g, PYSEC-2023-300, PYSEC-2023-301, PYSEC-2024-227, PYSEC-2024-228, PYSEC-2024-229, PYSEC-2025-211, PYSEC-2025-212, PYSEC-2025-213, PYSEC-2025-214, PYSEC-2025-215, PYSEC-2025-216, PYSEC-2025-217, PYSEC-2025-218, PYSEC-2025-40)
- pillow: 9.0.0 → 12.3.0 (GHSA-3f63-hfp8-52jq, GHSA-44wm-f244-xhp3, GHSA-8ghj-p4vj-mr35, GHSA-8vj2-vxx3-667w, GHSA-9j59-75qj-795w, GHSA-j7hp-h8jx-5ppr, GHSA-m2vv-5vj5-2hm7, GHSA-r73j-pqj5-w3x7, GHSA-wjx4-4jcj-g98j, PYSEC-2022-168, PYSEC-2022-42979, PYSEC-2022-42980, PYSEC-2023-175, PYSEC-2023-227, PYSEC-2026-165, PYSEC-2026-457, GHSA-56pw-mpj4-fxww)
- opencv-python: 4.7.0 → 5.0.0.93 (GHSA-qr4w-53vh-m672, PYSEC-2023-183)
- tqdm: 4.65.0 → 4.68.3 (GHSA-g7vv-2v7x-gj9p)
- gradio: 3.35.0 → 6.19.0 (GHSA-26jh-r8g2-6fpr, GHSA-279j-x4gx-hfrh, GHSA-34rf-p3r3-58x2, GHSA-37qc-qgx6-9xjv, GHSA-39mp-8hj3-5c49, GHSA-3c67-5hwx-f6wx, GHSA-3gf9-wv65-gwh9, GHSA-48cq-79qq-6f7x, GHSA-4q3c-cj7g-jcwf, GHSA-576c-3j53-r9jj, GHSA-5cpq-9538-jm2j, GHSA-6qm2-wpxq-7qh2, GHSA-6v6g-j5fq-hpvw, GHSA-77xq-6g77-h274, GHSA-7hp7-4p35-3cx2, GHSA-7v2w-h4gh-w5cv, GHSA-89v2-pqfv-c5r9, GHSA-8c87-gvhj-xm8m, GHSA-8jw3-6x8j-v96g, GHSA-973g-55hp-3frw, GHSA-f3h9-8phc-6gvh, GHSA-g6c9-f4xm-9j4x, GHSA-g9cj-cfpp-4g2x, GHSA-gqvf-3hgp-5hxv, GHSA-gvv6-33j7-884g, GHSA-hm3c-93pg-4cxw, GHSA-hmx6-r76c-85g9, GHSA-j2jg-fq62-7c3h, GHSA-j757-pf57-f8r4, GHSA-jmh7-g254-2cq9, GHSA-m842-4qm8-7gpq, GHSA-pfjf-5gxr-995x, GHSA-prpg-p95c-32fv, GHSA-qh6x-j82h-vpf9, GHSA-r364-m2j9-mf4h, GHSA-rvfh-h6c7-fc3c, GHSA-xh2x-3mrm-fwqm, PYSEC-2023-249, PYSEC-2023-255, PYSEC-2024-184, PYSEC-2024-196, PYSEC-2024-197, PYSEC-2024-198, PYSEC-2024-199, PYSEC-2024-213, PYSEC-2024-214, PYSEC-2024-215, PYSEC-2024-216, PYSEC-2024-217, PYSEC-2024-218, PYSEC-2024-219, PYSEC-2024-220, PYSEC-2024-255, PYSEC-2024-274, PYSEC-2025-118, PYSEC-2026-211, PYSEC-2026-345, PYSEC-2026-64, PYSEC-2026-65, PYSEC-2026-66, GHSA-3f95-mxq2-2f63, GHSA-xcgp-r7r8-2hc9, GHSA-3x9g-xfj5-fq84)
- torch: 2.0.0 → 2.12.1 (GHSA-3749-ghw9-m3mg, GHSA-53q9-r3pm-6pq6, GHSA-5pcm-hx3q-hm94, GHSA-887c-mr87-cxwp, GHSA-c678-jfcj-6jmf, GHSA-f4hp-rmr7-r7v8, GHSA-pg7h-5qx3-wjr3, GHSA-qfhq-4f3w-5fph, GHSA-rrmf-rvhw-rf47, GHSA-vgrw-7cvw-pwgx, GHSA-x3gm-94wq-g975, PYSEC-2024-250, PYSEC-2024-251, PYSEC-2024-252, PYSEC-2024-259, PYSEC-2025-191, PYSEC-2025-198, PYSEC-2025-203, PYSEC-2025-204, PYSEC-2025-205, PYSEC-2025-206, PYSEC-2025-207, PYSEC-2025-208, PYSEC-2025-209, PYSEC-2025-41, PYSEC-2026-139, GHSA-4vmg-rw8f-92f9)
- transformers: 4.30.0 → 5.13.0 (GHSA-29pf-2h5f-8g72, GHSA-37mw-44qp-f5jm, GHSA-37q5-v5qm-c9v8, GHSA-3863-2447-669p, GHSA-4w7r-h757-3r74, GHSA-59p9-h35m-wg4g, GHSA-69w3-r845-3855, GHSA-6rvg-6v2m-4j46, GHSA-9356-575x-2w9m, GHSA-fpwr-67px-3qhx, GHSA-hxxf-235m-72v3, GHSA-jjph-296x-mrcr, GHSA-phhr-52qp-3mj4, GHSA-q2wp-rjmx-x6x9, GHSA-qq3j-4f4f-9583, GHSA-qxrp-vhvm-j765, GHSA-rcv9-qm8p-9p6j, GHSA-v68g-wm8c-6x7j, GHSA-wrfc-pvp9-mr9g, PYSEC-2023-300, PYSEC-2023-301, PYSEC-2024-227, PYSEC-2024-228, PYSEC-2024-229, PYSEC-2025-211, PYSEC-2025-212, PYSEC-2025-213, PYSEC-2025-214, PYSEC-2025-215, PYSEC-2025-216, PYSEC-2025-217, PYSEC-2025-218, PYSEC-2025-40)
- pillow: 9.0.0 → 12.3.0 (GHSA-3f63-hfp8-52jq, GHSA-44wm-f244-xhp3, GHSA-8ghj-p4vj-mr35, GHSA-8vj2-vxx3-667w, GHSA-9j59-75qj-795w, GHSA-j7hp-h8jx-5ppr, GHSA-m2vv-5vj5-2hm7, GHSA-r73j-pqj5-w3x7, GHSA-wjx4-4jcj-g98j, PYSEC-2022-168, PYSEC-2022-42979, PYSEC-2022-42980, PYSEC-2023-175, PYSEC-2023-227, PYSEC-2026-165, PYSEC-2026-457, GHSA-56pw-mpj4-fxww)
- opencv-python: 4.7.0 → 5.0.0.93 (GHSA-qr4w-53vh-m672, PYSEC-2023-183)
- tqdm: 4.65.0 → 4.68.4 (GHSA-g7vv-2v7x-gj9p)
- gradio: 3.35.0 → 6.19.0 (GHSA-26jh-r8g2-6fpr, GHSA-279j-x4gx-hfrh, GHSA-34rf-p3r3-58x2, GHSA-37qc-qgx6-9xjv, GHSA-39mp-8hj3-5c49, GHSA-3c67-5hwx-f6wx, GHSA-3gf9-wv65-gwh9, GHSA-48cq-79qq-6f7x, GHSA-4q3c-cj7g-jcwf, GHSA-576c-3j53-r9jj, GHSA-5cpq-9538-jm2j, GHSA-6qm2-wpxq-7qh2, GHSA-6v6g-j5fq-hpvw, GHSA-77xq-6g77-h274, GHSA-7hp7-4p35-3cx2, GHSA-7v2w-h4gh-w5cv, GHSA-89v2-pqfv-c5r9, GHSA-8c87-gvhj-xm8m, GHSA-8jw3-6x8j-v96g, GHSA-973g-55hp-3frw, GHSA-f3h9-8phc-6gvh, GHSA-g6c9-f4xm-9j4x, GHSA-g9cj-cfpp-4g2x, GHSA-gqvf-3hgp-5hxv, GHSA-gvv6-33j7-884g, GHSA-hm3c-93pg-4cxw, GHSA-hmx6-r76c-85g9, GHSA-j2jg-fq62-7c3h, GHSA-j757-pf57-f8r4, GHSA-jmh7-g254-2cq9, GHSA-m842-4qm8-7gpq, GHSA-pfjf-5gxr-995x, GHSA-prpg-p95c-32fv, GHSA-qh6x-j82h-vpf9, GHSA-r364-m2j9-mf4h, GHSA-rvfh-h6c7-fc3c, GHSA-xh2x-3mrm-fwqm, PYSEC-2023-249, PYSEC-2023-255, PYSEC-2024-184, PYSEC-2024-196, PYSEC-2024-197, PYSEC-2024-198, PYSEC-2024-199, PYSEC-2024-213, PYSEC-2024-214, PYSEC-2024-215, PYSEC-2024-216, PYSEC-2024-217, PYSEC-2024-218, PYSEC-2024-219, PYSEC-2024-220, PYSEC-2024-255, PYSEC-2024-274, PYSEC-2025-118, PYSEC-2026-211, PYSEC-2026-345, PYSEC-2026-64, PYSEC-2026-65, PYSEC-2026-66, GHSA-3f95-mxq2-2f63, GHSA-xcgp-r7r8-2hc9, GHSA-3x9g-xfj5-fq84)
- torch: 2.0.0 → 2.12.1 (GHSA-3749-ghw9-m3mg, GHSA-53q9-r3pm-6pq6, GHSA-5pcm-hx3q-hm94, GHSA-887c-mr87-cxwp, GHSA-c678-jfcj-6jmf, GHSA-f4hp-rmr7-r7v8, GHSA-pg7h-5qx3-wjr3, GHSA-qfhq-4f3w-5fph, GHSA-rrmf-rvhw-rf47, GHSA-vgrw-7cvw-pwgx, GHSA-x3gm-94wq-g975, PYSEC-2024-250, PYSEC-2024-251, PYSEC-2024-252, PYSEC-2024-259, PYSEC-2025-191, PYSEC-2025-198, PYSEC-2025-203, PYSEC-2025-204, PYSEC-2025-205, PYSEC-2025-206, PYSEC-2025-207, PYSEC-2025-208, PYSEC-2025-209, PYSEC-2025-41, PYSEC-2026-139, GHSA-4vmg-rw8f-92f9)
- transformers: 4.30.0 → 5.13.0 (GHSA-29pf-2h5f-8g72, GHSA-37mw-44qp-f5jm, GHSA-37q5-v5qm-c9v8, GHSA-3863-2447-669p, GHSA-4w7r-h757-3r74, GHSA-59p9-h35m-wg4g, GHSA-69w3-r845-3855, GHSA-6rvg-6v2m-4j46, GHSA-9356-575x-2w9m, GHSA-fpwr-67px-3qhx, GHSA-hxxf-235m-72v3, GHSA-jjph-296x-mrcr, GHSA-phhr-52qp-3mj4, GHSA-q2wp-rjmx-x6x9, GHSA-qq3j-4f4f-9583, GHSA-qxrp-vhvm-j765, GHSA-rcv9-qm8p-9p6j, GHSA-v68g-wm8c-6x7j, GHSA-wrfc-pvp9-mr9g, PYSEC-2023-300, PYSEC-2023-301, PYSEC-2024-227, PYSEC-2024-228, PYSEC-2024-229, PYSEC-2025-211, PYSEC-2025-212, PYSEC-2025-213, PYSEC-2025-214, PYSEC-2025-215, PYSEC-2025-216, PYSEC-2025-217, PYSEC-2025-218, PYSEC-2025-40)
- pillow: 9.0.0 → 12.3.0 (GHSA-3f63-hfp8-52jq, GHSA-44wm-f244-xhp3, GHSA-8ghj-p4vj-mr35, GHSA-8vj2-vxx3-667w, GHSA-9j59-75qj-795w, GHSA-j7hp-h8jx-5ppr, GHSA-m2vv-5vj5-2hm7, GHSA-r73j-pqj5-w3x7, GHSA-wjx4-4jcj-g98j, PYSEC-2022-168, PYSEC-2022-42979, PYSEC-2022-42980, PYSEC-2023-175, PYSEC-2023-227, PYSEC-2026-165, PYSEC-2026-457, GHSA-56pw-mpj4-fxww)
- opencv-python: 4.7.0 → 5.0.0.93 (GHSA-qr4w-53vh-m672, PYSEC-2023-183)
- tqdm: 4.65.0 → 4.68.4 (GHSA-g7vv-2v7x-gj9p)
- gradio: 3.35.0 → 6.19.0 (GHSA-26jh-r8g2-6fpr, GHSA-279j-x4gx-hfrh, GHSA-34rf-p3r3-58x2, GHSA-37qc-qgx6-9xjv, GHSA-39mp-8hj3-5c49, GHSA-3c67-5hwx-f6wx, GHSA-3gf9-wv65-gwh9, GHSA-48cq-79qq-6f7x, GHSA-4q3c-cj7g-jcwf, GHSA-576c-3j53-r9jj, GHSA-5cpq-9538-jm2j, GHSA-6qm2-wpxq-7qh2, GHSA-6v6g-j5fq-hpvw, GHSA-77xq-6g77-h274, GHSA-7hp7-4p35-3cx2, GHSA-7v2w-h4gh-w5cv, GHSA-89v2-pqfv-c5r9, GHSA-8c87-gvhj-xm8m, GHSA-8jw3-6x8j-v96g, GHSA-973g-55hp-3frw, GHSA-f3h9-8phc-6gvh, GHSA-g6c9-f4xm-9j4x, GHSA-g9cj-cfpp-4g2x, GHSA-gqvf-3hgp-5hxv, GHSA-gvv6-33j7-884g, GHSA-hm3c-93pg-4cxw, GHSA-hmx6-r76c-85g9, GHSA-j2jg-fq62-7c3h, GHSA-j757-pf57-f8r4, GHSA-jmh7-g254-2cq9, GHSA-m842-4qm8-7gpq, GHSA-pfjf-5gxr-995x, GHSA-prpg-p95c-32fv, GHSA-qh6x-j82h-vpf9, GHSA-r364-m2j9-mf4h, GHSA-rvfh-h6c7-fc3c, GHSA-xh2x-3mrm-fwqm, PYSEC-2023-249, PYSEC-2023-255, PYSEC-2024-184, PYSEC-2024-196, PYSEC-2024-197, PYSEC-2024-198, PYSEC-2024-199, PYSEC-2024-213, PYSEC-2024-214, PYSEC-2024-215, PYSEC-2024-216, PYSEC-2024-217, PYSEC-2024-218, PYSEC-2024-219, PYSEC-2024-220, PYSEC-2024-255, PYSEC-2024-274, PYSEC-2025-118, PYSEC-2026-211, PYSEC-2026-345, PYSEC-2026-64, PYSEC-2026-65, PYSEC-2026-66, GHSA-3f95-mxq2-2f63, GHSA-xcgp-r7r8-2hc9, GHSA-3x9g-xfj5-fq84)
- torch: 2.06 → 2.12.1 (GHSA-3749-ghw9-m3mg, GHSA-887c-mr87-cxwp, GHSA-c678-jfcj-6jmf, GHSA-f4hp-rmr7-r7v8, GHSA-qfhq-4f3w-5fph, GHSA-rrmf-rvhw-rf47, GHSA-vgrw-7cvw-pwgx, GHSA-x3gm-94wq-g975, PYSEC-2025-191, PYSEC-2025-198, PYSEC-2025-199, PYSEC-2025-200, PYSEC-2025-201, PYSEC-2025-202, PYSEC-2025-203, PYSEC-2025-204, PYSEC-2025-205, PYSEC-2025-206, PYSEC-2025-207, PYSEC-2025-208, PYSEC-2025-209, PYSEC-2026-139, PYSEC-2026-1970)

Generated 1 test file(s):
  + test_image_io.py
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants