Skip to content

VULN UPGRADE: minor: marshmallow · patch: sphinx, sphinx-rtd-theme [docs]#11

Open
campaigner-prod[bot] wants to merge 1 commit intodevfrom
engraver-auto-version-upgrade/minorpatch/pip/docs/1-1770972164
Open

VULN UPGRADE: minor: marshmallow · patch: sphinx, sphinx-rtd-theme [docs]#11
campaigner-prod[bot] wants to merge 1 commit intodevfrom
engraver-auto-version-upgrade/minorpatch/pip/docs/1-1770972164

Conversation

@campaigner-prod
Copy link

Summary: Security update — 3 packages upgraded (MINOR changes included)

Manifests changed:

  • docs (pip)

Updates

Package From To Type Vulnerabilities Fixed
marshmallow 3.22.0 3.26.2 minor 2 MODERATE
sphinx 3.5.3 3.5.4 patch -
sphinx-rtd-theme 0.5.0 0.5.2 patch -

Packages marked with "-" are updated due to dependency constraints.


Security Details

ℹ️ Other Vulnerabilities (2)
Package CVE Severity Summary Unsafe Version Fixed In
marshmallow GHSA-428g-f7cq-pgp5 MODERATE Marshmallow has DoS in Schema.load(many) 3.22.0 3.26.2
marshmallow CVE-2025-68480 MODERATE Marshmallow has DoS in Schema.load(many) 3.22.0 -
⚠️ Dependencies that have Reached EOL (1)
Dependency Unsafe Version EOL Date New Version Path
sphinx-rtd-theme 0.5.0 - 0.5.2 docs/requirements.txt

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI

Update Mode: Vulnerability Remediation

🤖 Generated by DataDog Automated Dependency Management System

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants