Update dependency idna to v3 - #10
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|
CVE-2026-34516Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
 High |
7.5 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | https://github.com/aio-libs/aiohttp.git - v3.13.4 | None |
CVE-2026-34515Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
High |
7.5 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | https://github.com/aio-libs/aiohttp.git - v3.13.4 | None |
CVE-2025-69229Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
High |
7.5 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.13.3 | None |
CVE-2025-69228Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
High |
7.5 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.13.3 | None |
CVE-2025-69227Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
High |
7.5 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.13.3 | None |
CVE-2025-69223Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
High |
7.5 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.13.3 | None |
CVE-2024-30251Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
High |
7.5 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | aiohttp - 3.9.4 | None |
CVE-2023-49081Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
High |
7.2 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | aiohttp - 3.9.0 | None |
CVE-2025-69230Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
 Medium |
6.5 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.13.3 | None |
CVE-2025-69224Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
6.5 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.13.3 | None |
CVE-2024-27306Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
6.1 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.9.4 | None |
CVE-2026-34520Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.13.4 | None |
CVE-2026-34519Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.13.4 | None |
CVE-2026-34518Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.13.4 | None |
CVE-2026-34517Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | Upgrade to version aiohttp - 3.13.4 or greater | None |
CVE-2026-34514Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | https://github.com/aio-libs/aiohttp.git - v3.13.4 | None |
CVE-2026-34513Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | Upgrade to version aiohttp - 3.13.4 or greater | None |
CVE-2026-22815Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | Upgrade to version aiohttp - 3.13.4 or greater | None |
CVE-2025-69226Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.13.3 | None |
CVE-2025-69225Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.13.3 | None |
CVE-2025-53643Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.12.14 | None |
CVE-2024-52304Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | aiohttp - 3.10.11,aiohttp - 3.10.11 | None |
CVE-2023-49082Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | aiohttp - 3.9.0 | None |
CVE-2023-47627Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.8.6 | None |
CVE-2023-37276Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
5.3 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.8.5 | None |
CVE-2026-54279Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
4.7 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.14.1 | None |
CVE-2026-34525Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Medium |
4.0 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | Upgrade to version aiohttp - 3.13.4 or greater | None |
CVE-2023-47641Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
 Low |
3.4 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.8.0 | None |
CVE-2021-21330Path to dependency file: /requirements.txt Path to vulnerable library: /tmp/ws-ua_20260726042242_DHMEVT/python_BZCPYE/202607260422421/env/lib/python3.10/site-packages/aiohttp-3.5.3.dist-info Dependency Hierarchy: -> ❌ aiohttp-3.5.3.tar.gz (Vulnerable Library) |
Low |
3.1 | Direct aiohttp-3.5.3.tar.gz |
aiohttp-3.5.3.tar.gz | 3.7.4 | None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2025-47273 | setuptools-68.0.0-py3-none-any.whl |
| CVE-2026-34518 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2026-34515 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2025-69225 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2023-47627 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2025-69230 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2025-53643 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2023-49081 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2025-69228 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2025-69223 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2026-34514 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2026-54279 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2024-30251 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2026-34517 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2025-69226 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2025-69229 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2024-27306 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2026-45409 | idna-2.8-py2.py3-none-any.whl |
| CVE-2026-34525 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2026-22815 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2025-69227 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2023-37276 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2025-69224 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2024-3651 | idna-2.8-py2.py3-none-any.whl |
| CVE-2021-21330 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2024-52304 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2026-34520 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2026-59890 | setuptools-68.0.0-py3-none-any.whl |
| CVE-2023-47641 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2024-6345 | setuptools-68.0.0-py3-none-any.whl |
| CVE-2026-34516 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2023-49082 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2026-34513 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2026-34519 | aiohttp-3.5.3-cp37-cp37m-manylinux1_x86_64.whl |
Base branch total remaining vulnerabilities: 42
Base branch commit: null
Total libraries scanned: 22
Scan token: 21f0b11eab824fc4b6256a6be9571b09