Skip to content

[Harness SCS] Security upgrade flask-caching to version 2.5.1 - #370

Open
jatin471 wants to merge 1 commit into
mainfrom
harness-scs/fix-ad28e93f
Open

jatin471 wants to merge 1 commit into
mainfrom
harness-scs/fix-ad28e93f

Conversation

@jatin471

Copy link
Copy Markdown

Harness has created this PR to fix risky or vulnerable packages.

📁 Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

  • ctfd/data/CTFd/requirements.txt

📝 Description

Upgrade Version: 2.5.1


🛡️ Security Impact

Current version vulnerabilities: 1 (Critical: 0, High: 0, Medium: 1, Low: 0)

Severity CVSS Score Upgrade Version Reference Identifiers
medium severity 4.2 - CVE-2021-33026, GHSA-656c-6cxf-hvcv, CWE-269, CWE-502

Upgrade version vulnerabilities: 0 (Critical: 0, High: 0, Medium: 0, Low: 0)

Status: 🎉 1 vulnerabilities have been reduced/resolved.


📦 Dependencies affected

Dependency Name Change Type Vulnerabilities
flask MODIFIED 🔴 C:0 | 🟠 H:0 | 🟡 M:0 | ⚪ L:0
cachelib ADDED 🔴 C:0 | 🟠 H:0 | 🟡 M:0 | ⚪ L:0

👤 Created By

This PR was automatically created by Harness Auto Remediation.


Note

This PR is generated by Harness Supply Chain Security and contains changes based on AI recommendations. It is recommended to review the changes before merging.

This branch had an error being deployed

1 failed deployment
development — d6ebf30c Deployed Sep 30, 2026 by jatin471 via Build, Secret Scan, and Generate SBOM #393
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant