Audit Snyk check/fix 2.6

[geo-ghci-int[bot]]

⠋ Running snyk test for /tmp/tmpwb1tf61m/c2cgeoportal ► Running snyk test for /tmp/tmpwb1tf61m/c2cgeoportal

• Looking for supported Python items

✔ Looking for supported Python items ⠋ Processing 4 requirements.txt items⠙ Processing 2 Pipfile items✔ Processed 4 requirements.txt items

• Checking pipenv version ⚠️ 2022.1.8 pipenv version detected. Currently the following pipenv versions are supported: 2022.10.12,2022.9.21,2022.8.31,2022.7.24,2022.6.7,2022.5.2,2022.4.21,2021.11.23,2020.11.4,2020.8.13,2020.6.2,2020.5.28,2018.11.26,2018.11.14,2018.10.13,2018.10.9,2018.7.1,2018.6.25 ✔ Processed 2 Pipfile items ✔ Done

Successful fixes:

admin/requirements.txt ✔ Upgraded requests from 2.32.0 to 2.32.2

geoportal/requirements.txt ✔ Upgraded requests from 2.32.0 to 2.32.2

Unresolved items:

ci/Pipfile ✖ There is no actionable remediation to apply

doc/Pipfile ✖ There is no actionable remediation to apply

commons/requirements.txt ✖ There is no actionable remediation to apply

docker/qgisserver/requirements.txt ✖ There is no actionable remediation to apply

package-lock.json ✖ npm is not supported. Summary: 5 items were not fixed 2 items were successfully fixed 3 items were not vulnerable

14 issues: 1 Critical | 1 High | 2 Medium | 10 Low 2 issues are fixable 2 issues were successfully fixed

Tip: Re-run in debug mode to see more information: DEBUG=*snyk* . If the issue persists contact support@snyk.io