Found 2 vulnerabilities. An additional 0 vulnerabilities have been marked as unaffected.

Output from Automations

6 rules were checked:

If a new dependency is added where the license risk is at least medium

then notify all users in the group admins by email

✔️ The rule did not trigger. Manage rule

---

If a dependency contains a vulnerability which has not been marked as unaffected and which has not triggered this rule for this dependency before

then notify all users in the group admins by email

✔️ The rule did not trigger. Manage rule

---

If there is a dependency where the license risk is at least high

then send a pipeline warning

✔️ The rule did not trigger. Manage rule

---

If a new dependency is added where the license risk is at least high

then fail pipeline

✔️ The rule did not trigger. Manage rule

---

If a dependency contains a vulnerability which has not been marked as unaffected 
where CVSS is at least high (7.0-8.9)

then fail pipeline

✔️ The rule did not trigger. Manage rule

---

If a dependency contains a vulnerability which has not been marked as unaffected

then send a pipeline warning

⚠️ The rule triggered for the following vulnerabilities, causing a pipeline warning. Manage rule

Vulnerability	CVSS2	CVSS3	CVSS4	Dependency	Dependency Licenses
CVE-2022-40896	N/A	5.5	N/A	pygments (pypi)	BSD-3-Clause
CVE-2026-4539	1.7	3.3	4.8	pygments (pypi)	BSD-3-Clause