homelab/stack
1
0
Fork 0
Code Issues 111 Pull Requests 1 Actions Packages Projects 1 Releases Wiki Activity

vuln: api — 6 HIGH #117

New Issue
Closed
opened 2026-03-22 17:44:59 +00:00 by kert · 0 comments
kert commented 2026-03-22 17:44:59 +00:00
Owner
Copy Link

Image: gitea.homelab.fhirworx.io/homelab/api:sha-a9ca814b
Pipeline: #127
Summary: 6 HIGH

CVE Severity Package Installed Fixed Title
CVE-2026-26007 HIGH cryptography 46.0.4 46.0.5 cryptography: cryptography Subgroup Attack Due to Missing Su...
CVE-2026-26007 HIGH cryptography 46.0.4 46.0.5 cryptography: cryptography Subgroup Attack Due to Missing Su...
CVE-2026-30922 HIGH pyasn1 0.6.2 0.6.3 pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded...
CVE-2026-30922 HIGH pyasn1 0.6.2 0.6.3 pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded...
CVE-2026-32597 HIGH PyJWT 2.11.0 2.12.0 pyjwt: PyJWT accepts unknown crit header extensions (RFC 7...
CVE-2026-32597 HIGH PyJWT 2.11.0 2.12.0 pyjwt: PyJWT accepts unknown crit header extensions (RFC 7...
**Image:** `gitea.homelab.fhirworx.io/homelab/api:sha-a9ca814b` **Pipeline:** #127 **Summary:** 6 HIGH | CVE | Severity | Package | Installed | Fixed | Title | |-----|----------|---------|-----------|-------|-------| | CVE-2026-26007 | **HIGH** | cryptography | 46.0.4 | 46.0.5 | cryptography: cryptography Subgroup Attack Due to Missing Su... | | CVE-2026-26007 | **HIGH** | cryptography | 46.0.4 | 46.0.5 | cryptography: cryptography Subgroup Attack Due to Missing Su... | | CVE-2026-30922 | **HIGH** | pyasn1 | 0.6.2 | 0.6.3 | pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded... | | CVE-2026-30922 | **HIGH** | pyasn1 | 0.6.2 | 0.6.3 | pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded... | | CVE-2026-32597 | **HIGH** | PyJWT | 2.11.0 | 2.12.0 | pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7... | | CVE-2026-32597 | **HIGH** | PyJWT | 2.11.0 | 2.12.0 | pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7... |
kert added the quality label 2026-03-22 17:44:59 +00:00
kert closed this issue 2026-03-23 21:12:47 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
api
REST API (FastAPI)
 auth
Authentication and authorization
 bib
Bibliography, Zotero, citations
 ci
CI/CD pipelines and Woodpecker plugins
 cli
CLI commands and UX
 cloud
Cloud provider abstraction (AWS, GCP, Azure, self-hosted)
 config
Configuration and wiring
 data
Data loading, CCLF, BCDA, seeds
 databricks
Databricks jobs and deployment
 docs
Documentation and generated references
 image:api
image:docs
image:mc
image:notebooks
image:zotero
infra
lakehouse
Nessie, Polaris, Trino, Iceberg
 llm
llm module — local RAG over comments + Zotero corpus
 notebooks
marimo notebook errors (auto-filed by nb-watcher/nb-integration)
 packaging
Python packaging, optional deps, build system
 pfs
pipeline
Pipeline execution and validation
 pipeline:ci
pipeline:deploy
pipeline:harden
pipeline:infra-ci
pipeline:rebuild-all
pipeline:release
qpp
quality
Testing, coverage, error handling
 step:build
step:deploy
step:hadolint
step:lint
step:publish
step:scan
step:test
step:validate
styles
Charts, figures, visual theming
 tree
Project directory structure and file organization
No Label quality
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
kert renovate-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: homelab/stack#117
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?