Skip to content

Conversation

@sireeshajonnalagadda
Copy link
Contributor

Ref: https://github.com/devcontainers/internal/issues/300

GHSA ID Vulnerability ID Action Package Installed Version Required Version Language Install Path/ Note
GHSA-pq67-6m6q-mj2v: urllib3 5004460 y urllib3 1.26.18 2.5.0 Python opt/conda/pkgs/urllib3-1.26.18-py312h06a4308__0/lib/python3.12/site-packages/urllib3-1.26.18.dist-info/METADATA , opt/conda/lib/python3.12/site-packages/urllib3-1.26.18.dist-info/METADATA

@sireeshajonnalagadda
Copy link
Contributor Author

The pyopenssl package needs to be updated to version 2.5.0, as it is currently failing the "conda-pyopenssl-requirement" test. Although no specific vulnerability has been flagged, the test failure indicates that the current version does not meet the required compatibility or security standards. Updating to the latest version should resolve the issue.

@AlvaroRausell AlvaroRausell merged commit 8628491 into devcontainers:main Sep 16, 2025
2 checks passed
sireeshajonnalagadda added a commit to sireeshajonnalagadda/images that referenced this pull request Oct 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants