Repository navigation
Dependency audit: known vulnerabilities detected #756
Description
The scheduled full-tree dependency audit found known vulnerabilities.
This issue is refreshed in place on each daily run; see the edit history for changes.
Last run: https://github.com/posit-dev/vip/actions/runs/36822572089
Found 3 known vulnerabilities in 1 package
| Name | Version | ID | Fix Versions |
|---|---|---|---|
| urllib3 | 2.7.0 | CVE-2026-97687 | 2.8.0 |
| urllib3 | 2.7.0 | CVE-2026-97688 | 2.8.0 |
| urllib3 | 2.7.0 | CVE-2026-97689 | 2.8.0 |
| Name | Skip Reason |
|---|---|
| posit-vip | distribution marked as editable |
Activity
ian-flores commentedon Oct 2, 2026
Fixed by #749 (bumped urllib3 to 2.8.0). The Scheduled Dependency Audit passed on the 2026-10-02 nightly.