[dependabot]

Bumps aiohttp from 3.12.15 to 3.14.4.

[broly-code-security-scanner]

Broly Security Scan

Warning

Latest baseline snapshot is stale. Broly is running in PR-only fallback mode until the next scheduled baseline refreshes. This does not block the PR.

Warning

Summary

13 actionable finding(s) in this PR

• 🔴 3 critical
• 🟠 4 high
• 🟡 6 medium

Main table: 12 shown, 1 omitted of 13 actionable finding(s) above the reporting threshold. See the repository Security tab for the full set.

Severity	Scanner	Issue	Location	Dismiss	Verdict
🔴 CRITICAL	SCA	black@25.9.0 — 3 vulnerabilities (worst: PYSEC-2026-2120)	poetry.lock:1	d1	🔺 TRUE_POSITIVE · Confidence: HIGH
🔴 CRITICAL	SCA	transformers@4.56.2 — 15 vulnerabilities (worst: PYSEC-2026-2290)	poetry.lock:1	d2	🔺 TRUE_POSITIVE · Confidence: HIGH
🔴 CRITICAL	SCA	pillow@11.3.0 — 45 vulnerabilities (worst: GHSA-8g5g-8vmr-9782)	poetry.lock:1	d14	🔺 TRUE_POSITIVE · Confidence: HIGH
🟠 HIGH	SCA	urllib3@2.4.0 — 16 vulnerabilities (worst: GHSA-2xpw-w6gg-jr37)	poetry.lock:1	d6	🔺 TRUE_POSITIVE · Confidence: HIGH
🟠 HIGH	SCA	fsspec@2025.3.0 — 2 vulnerabilities (worst: GHSA-27vj-qcqg-25rc) → fixed in 2026.6.0	poetry.lock:1	d3	🔺 TRUE_POSITIVE · Confidence: HIGH
🟠 HIGH	SCA	virtualenv@20.34.0 — 14 vulnerabilities (worst: GHSA-5vjq-rrrf-7h2q)	poetry.lock:1	d15	🔺 TRUE_POSITIVE · Confidence: HIGH
🟠 HIGH	SCA	pyarrow@21.0.0 — 2 vulnerabilities (worst: GHSA-rgxp-2hwp-jwgg) → fixed in 23.0.1	poetry.lock:1	d5	🔺 TRUE_POSITIVE · Confidence: HIGH
🟡 MEDIUM	SCA	datasets@4.1.1 — 2 vulnerabilities (worst: GHSA-379c-qx7v-6h59) → fixed in 5.0.1	poetry.lock:1	d8	🔺 TRUE_POSITIVE · Confidence: HIGH
🟡 MEDIUM	SCA	idna@3.10 — 2 vulnerabilities (worst: GHSA-65pc-fj4g-8rjx) → fixed in 3.15	poetry.lock:1	d10	🔺 TRUE_POSITIVE · Confidence: HIGH
🟡 MEDIUM	SCA	pytest@8.4.2 — 2 vulnerabilities (worst: GHSA-6w46-j5rx-g56g) → fixed in 9.0.3	poetry.lock:1	d12	🔺 TRUE_POSITIVE · Confidence: HIGH
🟡 MEDIUM	SCA	filelock@3.19.1 — 4 vulnerabilities (worst: GHSA-w853-jp5j-5j7f)	poetry.lock:1	d9	🔺 TRUE_POSITIVE · Confidence: HIGH
🟡 MEDIUM	SCA	requests@2.32.5 — 2 vulnerabilities (worst: PYSEC-2026-2275) → fixed in 2.33.0	poetry.lock:1	d13	🔺 TRUE_POSITIVE · Confidence: HIGH

---

Fix Suggestions

black@25.9.0 — 3 vulnerabilities (worst: PYSEC-2026-2120) — poetry.lock:1

Pin black to a patched version once available (e.g., poetry add black@latest --group dev) or, as a workaround, remove/upgrade black and run the formatter only in an isolated, untrusted-input-free CI environment; monitor PYSEC-2026-2120, PYSEC-2026-2121, and GHSA-3936-cmfr-pm3m for fixed releases.

transformers@4.56.2 — 15 vulnerabilities (worst: PYSEC-2026-2290) — poetry.lock:1

Upgrade to the latest transformers release that addresses the individual advisories (e.g., poetry add transformers@latest or poetry update transformers), and since no single fixed version covers all 15 advisories, review each advisory individually and pin to the newest available version while monitoring for patched releases; as an interim mitigation, avoid loading untrusted models/checkpoints and disable unsafe deserialization paths.

pillow@11.3.0 — 45 vulnerabilities (worst: GHSA-8g5g-8vmr-9782) — poetry.lock:1

Upgrade to the latest available Pillow release (e.g., poetry add pillow@latest or poetry update pillow) and monitor for patched releases addressing GHSA-8g5g-8vmr-9782; as an interim workaround, restrict or sandbox processing of untrusted image inputs.

---

Dismiss false positives

Tick a box to dismiss the finding; untick it to bring the finding back. That is the same as replying /broly dismiss d1 and /broly undismiss d1. To record why it is a false positive, reply with /broly dismiss d1: your reason instead — Broly reuses those reasons to triage similar findings across the org.

• d1 · 🔴 CRITICAL · poetry.lock:1 · black@25.9.0 — 3 vulnerabilities (worst: PYSEC-2026-2120)
• d14 · 🔴 CRITICAL · poetry.lock:1 · pillow@11.3.0 — 45 vulnerabilities (worst: GHSA-8g5g-8vmr-9782)
• d2 · 🔴 CRITICAL · poetry.lock:1 · transformers@4.56.2 — 15 vulnerabilities (worst: PYSEC-2026-2290)
• d3 · 🟠 HIGH     · poetry.lock:1 · fsspec@2025.3.0 — 2 vulnerabilities (worst: GHSA-27vj-qcqg-25rc)
• d5 · 🟠 HIGH     · poetry.lock:1 · pyarrow@21.0.0 — 2 vulnerabilities (worst: GHSA-rgxp-2hwp-jwgg)
• d6 · 🟠 HIGH     · poetry.lock:1 · urllib3@2.4.0 — 16 vulnerabilities (worst: GHSA-2xpw-w6gg-jr37)
• d15 · 🟠 HIGH     · poetry.lock:1 · virtualenv@20.34.0 — 14 vulnerabilities (worst: GHSA-5vjq-rrrf-7h2q)
• d8 · 🟡 MEDIUM   · poetry.lock:1 · datasets@4.1.1 — 2 vulnerabilities (worst: GHSA-379c-qx7v-6h59)
• d9 · 🟡 MEDIUM   · poetry.lock:1 · filelock@3.19.1 — 4 vulnerabilities (worst: GHSA-w853-jp5j-5j7f)
• d10 · 🟡 MEDIUM   · poetry.lock:1 · idna@3.10 — 2 vulnerabilities (worst: GHSA-65pc-fj4g-8rjx)
• d11 · 🟡 MEDIUM   · poetry.lock:1 · pygments@2.19.1 — 2 vulnerabilities (worst: PYSEC-2026-2987)
• d12 · 🟡 MEDIUM   · poetry.lock:1 · pytest@8.4.2 — 2 vulnerabilities (worst: GHSA-6w46-j5rx-g56g)
• d13 · 🟡 MEDIUM   · poetry.lock:1 · requests@2.32.5 — 2 vulnerabilities (worst: PYSEC-2026-2275)

Note

Re-scan this PR anytime with /broly scan — useful after /broly undismiss, or to refresh findings without a new push.

Broly — SAST (GLM-5.3-Flash) · Secrets · SCA · IaC · GH Actions · Base Images · Supply Chain Threats · Attack Hypotheses · Adversarial Verification

We're continuously improving Broly's accuracy and finding quality — your feedback is valuable. False positives, missed findings, bugs, and feature requests all welcome.