Skip to content

chore(deps): update dependency @sentry/nextjs to v8.34.0 #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dev-mend-for-github-com wants to merge 1 commit into
base: master
Choose a base branch
from

chore(deps): update dependency @sentry/nextjs to v8.34.0

29c79ce
Select commit
Loading
Failed to load commit list.
Open

chore(deps): update dependency @sentry/nextjs to v8.34.0 #3

chore(deps): update dependency @sentry/nextjs to v8.34.0
29c79ce
Select commit
Loading
Failed to load commit list.
Dev - Mend for GitHub.com / Mend Security Check failed Feb 15, 2026 in 7m 8s

Security Report

❗️Scan Incomplete: The scan completed with partial failure. The integration encountered issues with one or more projects in this repository, preventing their scan. The errors occurred in the following package managers: gradle,CocoaPods. Consequently, there may be gaps in the coverage of open-source dependencies used in the repository.

Scan Details Report

gradle

/tmp/ws-scm/AutoGPT/classic/frontend/android/build.gradle
Step Level Description Details
Preparing the project for scan ⚠Warn One or more of the installations failed failed running mend init script (mendDeps):
NOTE: Picked up JDK_JAVA_OPTIONS: --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/sun.reflect.generics.reflectiveObjects=ALL-UNNAMED

FAILURE: Build failed with an exception.

* Where:
Settings file '/tmp/ws-scm/AutoGPT/classic/frontend/android/settings.gradle' line: 6

* What went wrong:
A problem occurred evaluating settings 'andro...

pip

/tmp/ws-scm/AutoGPT/classic/benchmark/agbenchmark/challenges/verticals/code/6_battleship/artifacts_in/product_requirements.txt
Step Level Description Details
Resolving the project ⚠Warn Some problems occurred while performing the resolution operation
  • Failed to execute command: /tmp/ws-ua_20260215181733_IKSBKB/cmd_JKIFBM/20260215182004/VGTGLA_script.sh
    Error lines:
    [ERROR: Invalid requirement: 'Specifications for Battleship': Expected end or semicolon (after name and no valid version specifier), Specifications for Battleship, ^ (from line 1 of /tmp/ws-scm/AutoGPT/classic/benchmark/agbenchmark/challenges/vertica...
  • pip install command failed, trying to install dependencies one by one
  • Failed to parse the following dependencies: *[Players take turns calling out a row and column, attempting to name a square containing one of the opponent's ships., The Grid: Each player's grid is a 10x10 grid, identified by rows (using numbers 1-10) and columns (using letters A-J)., Each ship occupies contiguous squares on the grid, arranged either horizontally or vertically., At the start of t...
  • Failed to execute command: /tmp/ws-ua_20260215181733_IKSBKB/cmd_JKIFBM/20260215182005/HTWXGM_script.sh
    Error lines:
    [ERROR: Could not find a version that satisfies the requirement Specifications (from versions: none), ERROR: No matching distribution found for Specifications]
    Output lines:
    [Looking in links: /tmp/ws-ua_20260215181733_IKSBKB/python_NSYKIC/20260215181733/1]
  • Failed to get hierarchy tree, trying to collect a flat list (which may only contain partial results)

/tmp/ws-scm/AutoGPT/classic/original_autogpt
Step Level Description Details
Resolving the project ⚠Warn Some problems occurred while performing the resolution operation
  • Failed to execute command: /tmp/ws-ua_20260215181733_IKSBKB/cmd_JKIFBM/20260215182008/OPIHTS_script.sh
    Error lines:
    [ERROR: Package 'agpt' requires a different Python: 3.9.25 not in '<4.0,>=3.10']
    Output lines:
    [Looking in links: /tmp/ws-ua_20260215181733_IKSBKB/python_NSYKIC/20260215181733, Processing /tmp/ws-scm/AutoGPT/classic/original_autogpt, Installing build dependencies: ...
  • Failed to get hierarchy tree, trying to collect a flat list (which may only contain partial results)

/tmp/ws-scm/AutoGPT/classic/original_autogpt/autogpt/app
Step Level Description Details
Resolving the project ⚠Warn Some problems occurred while performing the resolution operation
  • Failed to execute command: /tmp/ws-ua_20260215181733_IKSBKB/cmd_JKIFBM/20260215182012/ZSJCVE_script.sh
    Error lines:
    [ error: subprocess-exited-with-error, � Getting requirements to build wheel did not run successfully., � exit code: 1, ��> [17 lines of output], Traceback (most recent call last):, File "/tmp/ws-ua_20260215181733_IKSBKB/python_NSYKIC/2026021518...
  • Failed to get hierarchy tree, trying to collect a flat list (which may only contain partial results)

poetry

/tmp/ws-scm/AutoGPT/classic/forge/pyproject.toml
Step Level Description Details
Resolving the project ⚠Warn Failed to build the dependency tree, fallback was used in the scan, results may be incomplete Error occurred while parsing the poetry show --tree command on the /tmp/ws-scm/AutoGPT/classic/forge/pyproject.toml file

/tmp/ws-scm/AutoGPT/classic/original_autogpt/pyproject.toml
Step Level Description Details
Resolving the project ⚠Warn Failed to build the dependency tree, fallback was used in the scan, results may be incomplete Error occurred while parsing the poetry show --tree command on the /tmp/ws-scm/AutoGPT/classic/original_autogpt/pyproject.toml file

You have successfully remediated 22 vulnerabilities, but introduced 47 new vulnerabilities in this branch.

❌ New vulnerabilities:
Vulnerability Severity CVSS Score Vulnerable Library Direct Library Suggested Fix Issue Reachability
CVE-2024-34351

Path to dependency file: /classic/benchmark/frontend/package.json

Path to vulnerable library: /classic/benchmark/frontend/node_modules/next/package.json

Dependency Hierarchy:

-> ❌ next-13.5.11.tgz (Vulnerable Library)

High 7.5 Direct next-13.5.11.tgz next-13.5.11.tgz next - 14.1.1 None

Reachable
CVE-2025-57822

Path to dependency file: /classic/benchmark/frontend/package.json

Path to vulnerable library: /classic/benchmark/frontend/node_modules/next/package.json

Dependency Hierarchy:

-> ❌ next-13.5.11.tgz (Vulnerable Library)

Medium 6.5 Direct next-13.5.11.tgz next-13.5.11.tgz 14.2.32 None

Reachable
CVE-2024-47831

Path to dependency file: /classic/benchmark/frontend/package.json

Path to vulnerable library: /classic/benchmark/frontend/node_modules/next/package.json

Dependency Hierarchy:

-> ❌ next-13.5.11.tgz (Vulnerable Library)

Medium 5.9 Direct next-13.5.11.tgz next-13.5.11.tgz 14.2.7 None

Reachable
CVE-2025-55173

Path to dependency file: /classic/benchmark/frontend/package.json

Path to vulnerable library: /classic/benchmark/frontend/node_modules/next/package.json

Dependency Hierarchy:

-> ❌ next-13.5.11.tgz (Vulnerable Library)

Medium 4.3 Direct next-13.5.11.tgz next-13.5.11.tgz 14.2.31 None

Reachable
CVE-2025-29927

Path to dependency file: /classic/benchmark/frontend/package.json

Path to vulnerable library: /classic/benchmark/frontend/node_modules/next/package.json

Dependency Hierarchy:

-> ❌ next-13.5.11.tgz (Vulnerable Library)

Critical 9.1 Direct next-13.5.11.tgz next-13.5.11.tgz next - 13.5.9,next - 12.3.5,next - 15.2.3,https://github.com/vercel/next.js.git - v13.5.9,next - 14.2.25 None
CVE-2025-69229

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> autogpt-libs-0.2.0 (Root Library)

   -> supabase-2.7.4-py3-none-any.whl

     -> realtime-2.0.5-py3-none-any.whl

       -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl autogpt-libs-0.2.0 None
CVE-2025-69229

Path to dependency file: /classic/original_autogpt/.ws-temp-JNVBVQ-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/agpt-cm9iHxbr-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/agbenchmark-gctv3_E3-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-forge-Eq_saOJk-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info

Dependency Hierarchy:

-> ❌ aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Direct aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl None
CVE-2025-69229

Path to dependency file: /autogpt_platform/autogpt_libs/.ws-temp-WZEEZI-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-libs-BFR2WaoL-py3.12/lib/python3.12/site-packages/aiohttp-3.10.5.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.2-py3-none-any.whl

     -> ❌ aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2025-69229

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.5-py3-none-any.whl

     -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2025-69228

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> autogpt-libs-0.2.0 (Root Library)

   -> supabase-2.7.4-py3-none-any.whl

     -> realtime-2.0.5-py3-none-any.whl

       -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl autogpt-libs-0.2.0 None
CVE-2025-69228

Path to dependency file: /classic/original_autogpt/.ws-temp-JNVBVQ-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/agpt-cm9iHxbr-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/agbenchmark-gctv3_E3-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-forge-Eq_saOJk-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info

Dependency Hierarchy:

-> ❌ aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Direct aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl None
CVE-2025-69228

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.5-py3-none-any.whl

     -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2025-69228

Path to dependency file: /autogpt_platform/autogpt_libs/.ws-temp-WZEEZI-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-libs-BFR2WaoL-py3.12/lib/python3.12/site-packages/aiohttp-3.10.5.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.2-py3-none-any.whl

     -> ❌ aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2025-69227

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> autogpt-libs-0.2.0 (Root Library)

   -> supabase-2.7.4-py3-none-any.whl

     -> realtime-2.0.5-py3-none-any.whl

       -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl autogpt-libs-0.2.0 None
CVE-2025-69227

Path to dependency file: /classic/original_autogpt/.ws-temp-JNVBVQ-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/agpt-cm9iHxbr-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/agbenchmark-gctv3_E3-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-forge-Eq_saOJk-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info

Dependency Hierarchy:

-> ❌ aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Direct aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl None
CVE-2025-69227

Path to dependency file: /autogpt_platform/autogpt_libs/.ws-temp-WZEEZI-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-libs-BFR2WaoL-py3.12/lib/python3.12/site-packages/aiohttp-3.10.5.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.2-py3-none-any.whl

     -> ❌ aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2025-69227

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.5-py3-none-any.whl

     -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2025-69223

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> autogpt-libs-0.2.0 (Root Library)

   -> supabase-2.7.4-py3-none-any.whl

     -> realtime-2.0.5-py3-none-any.whl

       -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl autogpt-libs-0.2.0 None
CVE-2025-69223

Path to dependency file: /classic/original_autogpt/.ws-temp-JNVBVQ-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/agpt-cm9iHxbr-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/agbenchmark-gctv3_E3-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-forge-Eq_saOJk-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info

Dependency Hierarchy:

-> ❌ aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Direct aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl None
CVE-2025-69223

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.5-py3-none-any.whl

     -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2025-69223

Path to dependency file: /autogpt_platform/autogpt_libs/.ws-temp-WZEEZI-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-libs-BFR2WaoL-py3.12/lib/python3.12/site-packages/aiohttp-3.10.5.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.2-py3-none-any.whl

     -> ❌ aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2024-52303

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> autogpt-libs-0.2.0 (Root Library)

   -> supabase-2.7.4-py3-none-any.whl

     -> realtime-2.0.5-py3-none-any.whl

       -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl autogpt-libs-0.2.0 Transitive aiohttp - 3.10.11 None
CVE-2024-52303

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.5-py3-none-any.whl

     -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

High 7.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl Transitive aiohttp - 3.10.11 None
CVE-2024-51479

Path to dependency file: /classic/benchmark/frontend/package.json

Path to vulnerable library: /classic/benchmark/frontend/node_modules/next/package.json

Dependency Hierarchy:

-> ❌ next-13.5.11.tgz (Vulnerable Library)

High 7.5 Direct next-13.5.11.tgz next-13.5.11.tgz next - 14.2.15 None
CVE-2021-20276

Path to dependency file: /classic/original_autogpt/.ws-temp-JNVBVQ-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/agpt-cm9iHxbr-py3.12/lib/python3.12/site-packages/pillow-10.2.0.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/agbenchmark-gctv3_E3-py3.12/lib/python3.12/site-packages/pillow-10.2.0.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-forge-Eq_saOJk-py3.12/lib/python3.12/site-packages/pillow-10.2.0.dist-info

Dependency Hierarchy:

-> ❌ pillow-10.2.0-cp312-cp312-manylinux_2_28_x86_64.whl (Vulnerable Library)

High 7.5 Direct pillow-10.2.0-cp312-cp312-manylinux_2_28_x86_64.whl pillow-10.2.0-cp312-cp312-manylinux_2_28_x86_64.whl Pillow - no_fix,ch.qos.logback:logback-core - no_fix None
CVE-2025-69230

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> autogpt-libs-0.2.0 (Root Library)

   -> supabase-2.7.4-py3-none-any.whl

     -> realtime-2.0.5-py3-none-any.whl

       -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 6.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl autogpt-libs-0.2.0 None
CVE-2025-69230

Path to dependency file: /classic/original_autogpt/.ws-temp-JNVBVQ-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/agpt-cm9iHxbr-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/agbenchmark-gctv3_E3-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-forge-Eq_saOJk-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info

Dependency Hierarchy:

-> ❌ aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 6.5 Direct aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl None
CVE-2025-69230

Path to dependency file: /autogpt_platform/autogpt_libs/.ws-temp-WZEEZI-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-libs-BFR2WaoL-py3.12/lib/python3.12/site-packages/aiohttp-3.10.5.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.2-py3-none-any.whl

     -> ❌ aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 6.5 Transitive aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2025-69230

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.5-py3-none-any.whl

     -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 6.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2025-69224

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> autogpt-libs-0.2.0 (Root Library)

   -> supabase-2.7.4-py3-none-any.whl

     -> realtime-2.0.5-py3-none-any.whl

       -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 6.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl autogpt-libs-0.2.0 None
CVE-2025-69224

Path to dependency file: /classic/original_autogpt/.ws-temp-JNVBVQ-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/agpt-cm9iHxbr-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/agbenchmark-gctv3_E3-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-forge-Eq_saOJk-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info

Dependency Hierarchy:

-> ❌ aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 6.5 Direct aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl None
CVE-2025-69224

Path to dependency file: /autogpt_platform/autogpt_libs/.ws-temp-WZEEZI-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-libs-BFR2WaoL-py3.12/lib/python3.12/site-packages/aiohttp-3.10.5.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.2-py3-none-any.whl

     -> ❌ aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 6.5 Transitive aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2025-69224

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.5-py3-none-any.whl

     -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 6.5 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2021-41496

Path to dependency file: /classic/forge/.ws-temp-OHIOIO-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-forge-Eq_saOJk-py3.12/lib/python3.12/site-packages/numpy-1.26.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/agbenchmark-gctv3_E3-py3.12/lib/python3.12/site-packages/numpy-1.26.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/agpt-cm9iHxbr-py3.12/lib/python3.12/site-packages/numpy-1.26.3.dist-info

Dependency Hierarchy:

-> ❌ numpy-1.26.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.5 Direct numpy-1.26.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl numpy-1.26.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl https://github.com/numpy/numpy.git - no_fix None
CVE-2021-41496

Path to dependency file: /docs/requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260215181733_IKSBKB/python_NSYKIC/202602151820141/env/lib/python3.9/site-packages/numpy-2.0.2.dist-info

Dependency Hierarchy:

-> mkdocs_table_reader_plugin-3.1.0-py3-none-any.whl (Root Library)

   -> pandas-2.3.3-cp310-cp310-macosx_10_9_x86_64.whl

     -> ❌ numpy-2.0.2-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.5 Transitive numpy-2.0.2-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl mkdocs_table_reader_plugin-3.1.0-py3-none-any.whl Transitive https://github.com/numpy/numpy.git - no_fix None
CVE-2025-69226

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> autogpt-libs-0.2.0 (Root Library)

   -> supabase-2.7.4-py3-none-any.whl

     -> realtime-2.0.5-py3-none-any.whl

       -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.3 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl autogpt-libs-0.2.0 None
CVE-2025-69226

Path to dependency file: /classic/original_autogpt/.ws-temp-JNVBVQ-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/agpt-cm9iHxbr-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/agbenchmark-gctv3_E3-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-forge-Eq_saOJk-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info

Dependency Hierarchy:

-> ❌ aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.3 Direct aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl None
CVE-2025-69226

Path to dependency file: /autogpt_platform/autogpt_libs/.ws-temp-WZEEZI-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-libs-BFR2WaoL-py3.12/lib/python3.12/site-packages/aiohttp-3.10.5.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.2-py3-none-any.whl

     -> ❌ aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.3 Transitive aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2025-69226

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.5-py3-none-any.whl

     -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.3 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2025-69225

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> autogpt-libs-0.2.0 (Root Library)

   -> supabase-2.7.4-py3-none-any.whl

     -> realtime-2.0.5-py3-none-any.whl

       -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.3 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl autogpt-libs-0.2.0 None
CVE-2025-69225

Path to dependency file: /classic/original_autogpt/.ws-temp-JNVBVQ-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/agpt-cm9iHxbr-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/agbenchmark-gctv3_E3-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-forge-Eq_saOJk-py3.12/lib/python3.12/site-packages/aiohttp-3.9.3.dist-info

Dependency Hierarchy:

-> ❌ aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.3 Direct aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl aiohttp-3.9.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl None
CVE-2025-69225

Path to dependency file: /autogpt_platform/autogpt_libs/.ws-temp-WZEEZI-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-libs-BFR2WaoL-py3.12/lib/python3.12/site-packages/aiohttp-3.10.5.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.2-py3-none-any.whl

     -> ❌ aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.3 Transitive aiohttp-3.10.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2025-69225

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.5-py3-none-any.whl

     -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.3 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl None
CVE-2024-52304

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> autogpt-libs-0.2.0 (Root Library)

   -> supabase-2.7.4-py3-none-any.whl

     -> realtime-2.0.5-py3-none-any.whl

       -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.3 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl autogpt-libs-0.2.0 Transitive aiohttp - 3.10.11 None
CVE-2024-52304

Path to dependency file: /autogpt_platform/backend/.ws-temp-CEBYAP-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-platform-backend--YkgNmTR-py3.12/lib/python3.12/site-packages/aiohttp-3.10.8.dist-info

Dependency Hierarchy:

-> supabase-2.7.4-py3-none-any.whl (Root Library)

   -> realtime-2.0.5-py3-none-any.whl

     -> ❌ aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.3 Transitive aiohttp-3.10.8-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl supabase-2.7.4-py3-none-any.whl Transitive aiohttp - 3.10.11 None
CVE-2021-41495

Path to dependency file: /classic/forge/.ws-temp-OHIOIO-requirements.txt

Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/autogpt-forge-Eq_saOJk-py3.12/lib/python3.12/site-packages/numpy-1.26.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/agbenchmark-gctv3_E3-py3.12/lib/python3.12/site-packages/numpy-1.26.3.dist-info,/home/wss-scanner/.cache/pypoetry/virtualenvs/agpt-cm9iHxbr-py3.12/lib/python3.12/site-packages/numpy-1.26.3.dist-info

Dependency Hierarchy:

-> ❌ numpy-1.26.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.3 Direct numpy-1.26.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl numpy-1.26.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl https://github.com/numpy/numpy.git - no_fix None
CVE-2021-41495

Path to dependency file: /docs/requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260215181733_IKSBKB/python_NSYKIC/202602151820141/env/lib/python3.9/site-packages/numpy-2.0.2.dist-info

Dependency Hierarchy:

-> mkdocs_table_reader_plugin-3.1.0-py3-none-any.whl (Root Library)

   -> pandas-2.3.3-cp310-cp310-macosx_10_9_x86_64.whl

     -> ❌ numpy-2.0.2-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)

Medium 5.3 Transitive numpy-2.0.2-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl mkdocs_table_reader_plugin-3.1.0-py3-none-any.whl Transitive https://github.com/numpy/numpy.git - no_fix None

✔️ Remediated vulnerabilities:

Vulnerability Vulnerable Library
CVE-2025-57822 next-13.5.7.tgz
CVE-2025-55173 next-13.5.7.tgz
CVE-2021-41496 numpy-1.21.6-cp37-cp37m-manylinux_2_12_x86_64.manylinux2010_x86_64.whl
CVE-2025-69226 aiohttp-3.10.8-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
CVE-2021-41495 numpy-1.21.6-cp37-cp37m-manylinux_2_12_x86_64.manylinux2010_x86_64.whl
CVE-2025-69227 aiohttp-3.10.8-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
CVE-2021-41496 numpy-1.26.3-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
CVE-2021-41495 numpy-1.26.3-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
CVE-2025-64756 glob-10.4.5.tgz
CVE-2025-69226 aiohttp-3.9.3-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
CVE-2025-69229 aiohttp-3.10.8-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
CVE-2024-56332 next-13.5.7.tgz
CVE-2024-34351 next-13.5.7.tgz
CVE-2025-5889 brace-expansion-2.0.1.tgz
CVE-2024-47831 next-13.5.7.tgz
CVE-2025-68146 filelock-3.16.1-py3-none-any.whl
CVE-2025-69223 aiohttp-3.10.8-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
CVE-2025-48068 next-13.5.7.tgz
CVE-2024-21538 cross-spawn-7.0.3.tgz
CVE-2025-29927 next-13.5.7.tgz
CVE-2021-20276 pillow-10.2.0-cp311-cp311-manylinux_2_28_x86_64.whl
CVE-2025-68142 pymdown_extensions-10.2.1-py3-none-any.whl

Base branch total remaining vulnerabilities: 60
Base branch commit: 6b1397043d8ac15e8c30223f1f4373746a075433


Total libraries scanned: 951

Scan token: 8c10285a335b4f74a199b9699b9e3e12

View more details on Dev - Mend for GitHub.com