chore(deps): update dependency nltk to v3.9 #52
Security Report
❌ New vulnerabilities:
| CVE | Severity |  CVSS Score |
Vulnerable Library | Suggested Fix | Issue |
|---|---|---|---|---|---|
CVE-2025-2148Path to dependency file: /packages/bert/requirements.txt Path to vulnerable library: /tmp/ws-ua_20250321045959_LSRHAM/python_QPYIRC/202503210501351/env/lib/python3.9/site-packages/torch-2.6.0.dist-info Dependency Hierarchy: -> bert_score-0.3.13-py3-none-any.whl (Root Library) -> ❌ torch-2.6.0-cp39-cp39-manylinux1_x86_64.whl (Vulnerable Library) |
 Medium |
5.0 | torch-2.6.0-cp39-cp39-manylinux1_x86_64.whl | Upgrade to version: torch - no_fix | #7 |
CVE-2025-2149Path to dependency file: /packages/bert/requirements.txt Path to vulnerable library: /tmp/ws-ua_20250321045959_LSRHAM/python_QPYIRC/202503210501351/env/lib/python3.9/site-packages/torch-2.6.0.dist-info Dependency Hierarchy: -> bert_score-0.3.13-py3-none-any.whl (Root Library) -> ❌ torch-2.6.0-cp39-cp39-manylinux1_x86_64.whl (Vulnerable Library) |
 Low |
2.5 | torch-2.6.0-cp39-cp39-manylinux1_x86_64.whl | Upgrade to version: pytorch - no_fix | #7 |
✔️ Remediated vulnerabilities:
| CVE | Vulnerable Library |
|---|---|
| CVE-2024-35195 | requests-2.31.0-py3-none-any.whl |
| CVE-2025-2148 | torch-1.13.1-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2024-39705 | nltk-3.8.1-py3-none-any.whl |
| CVE-2024-37891 | urllib3-2.0.7-py3-none-any.whl |
| CVE-2023-44271 | Pillow-9.5.0-cp37-cp37m-manylinux_2_28_x86_64.whl |
| CVE-2025-2149 | torch-1.13.1-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2024-11392 | transformers-4.30.2-py3-none-any.whl |
| CVE-2023-7018 | transformers-4.30.2-py3-none-any.whl |
| CVE-2023-6730 | transformers-4.30.2-py3-none-any.whl |
| CVE-2023-45139 | fonttools-4.38.0-py3-none-any.whl |
| CVE-2021-34141 | numpy-1.21.6-cp37-cp37m-manylinux_2_12_x86_64.manylinux2010_x86_64.whl |
| CVE-2024-3568 | transformers-4.30.2-py3-none-any.whl |
| CVE-2024-5569 | zipp-3.15.0-py3-none-any.whl |
| CVE-2024-31584 | torch-1.13.1-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2024-12720 | transformers-4.30.2-py3-none-any.whl |
| CVE-2024-31583 | torch-1.13.1-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2024-11394 | transformers-4.30.2-py3-none-any.whl |
| CVE-2024-6345 | setuptools-68.0.0-py3-none-any.whl |
| CVE-2023-50447 | Pillow-9.5.0-cp37-cp37m-manylinux_2_28_x86_64.whl |
| CVE-2024-31580 | torch-1.13.1-cp37-cp37m-manylinux1_x86_64.whl |
| CVE-2024-11393 | transformers-4.30.2-py3-none-any.whl |
Base branch total remaining vulnerabilities: 34
Base branch commit: 4eb009871afeb33b45c5852a5ff24335e8fa0814
Total libraries scanned: 596
Scan token: 5ea5b836ac3a4d6f961e7e52bacf3fa6