Skip to content

Vulnerabilities fixes#780

Merged
theboringstuff merged 3 commits intomainfrom
fix/vulnerabilities
Oct 28, 2025
Merged

Vulnerabilities fixes#780
theboringstuff merged 3 commits intomainfrom
fix/vulnerabilities

Conversation

@theboringstuff
Copy link
Collaborator

@theboringstuff theboringstuff commented Oct 23, 2025

Description

Need to fix found vulnerabilities

Solution

  • Updated deepdiff to 8.6.* to fix CVE-2025-58367
    • Had to drop support for python 3.8, as new deepdiff does not support it
    • Python minimal version is now 3.9
    • Had to drop support for cento7, as it contains only python 3.8
  • Updated helm to v3.19.0 to fix CVE-2025-47907 and CVE-2025-4674
  • CVE-2025-9230 was fixed by rebuilding image from latest bookworm

Checklist

  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • There is no breaking changes, or migration patch is provided
  • Integration CI passed
  • Unit tests. If Yes list of new/changed tests with brief description
  • There is no merge conflicts

@theboringstuff theboringstuff changed the title vulnerabilities fixes Vulnerabilities fixes Oct 23, 2025
@theboringstuff theboringstuff marked this pull request as ready for review October 23, 2025 07:32
@theboringstuff theboringstuff merged commit a82fabb into main Oct 28, 2025
29 checks passed
@github-actions github-actions bot locked and limited conversation to collaborators Oct 28, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant