From d80186a55646f53bd71af830081feb906ba6bc17 Mon Sep 17 00:00:00 2001 From: Joachim Wiberg Date: Tue, 28 Oct 2025 17:12:36 +0100 Subject: [PATCH] test/docker: security analysis of GHSA-cq46-m9x9-j8w2 for scapy Signed-off-by: Joachim Wiberg --- test/docker/pip-requirements.txt | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/test/docker/pip-requirements.txt b/test/docker/pip-requirements.txt index f0935781..1a8df2d4 100644 --- a/test/docker/pip-requirements.txt +++ b/test/docker/pip-requirements.txt @@ -6,4 +6,8 @@ pydot==1.4.2 pyyaml==6.0.1 passlib==1.7.4 requests~=2.32.4 +# GHSA-cq46-m9x9-j8w2: scapy <=2.6.1 has pickle deserialization vuln in session +# loading (-s flag). Low risk: test framework only uses packet crafting (Ether, +# sendp, LLDP), not session loading. Update to 2.7.0+ when available on PyPI. +# https://github.com/advisories/GHSA-cq46-m9x9-j8w2 scapy==2.6.1