url/homelable
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: patch CVEs — upgrade python-jose 3.3→3.5, python-multipart 0.0.12→0.0.22; use safety scan

Browse Source
This commit is contained in:
Pouzor
2026-03-07 15:08:04 +01:00
parent 4235f10331
commit fccbdad409
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/security.yml
+2 -2
View File
@@ -32,5 +32,5 @@ jobs:
- uses: actions/setup-python@v5 - uses: actions/setup-python@v5
with: with:
python-version: '3.11' python-version: '3.11'
- name: Safety check - name: Safety scan
run: pip install safety && safety check -r backend/requirements.txt run: pip install safety && safety scan -r backend/requirements.txt
backend/requirements.txt
+2 -2
View File
@@ -6,10 +6,10 @@ aiosqlite==0.20.0
alembic==1.13.3 alembic==1.13.3
pydantic==2.9.2 pydantic==2.9.2
pydantic-settings==2.5.2 pydantic-settings==2.5.2
python-jose[cryptography]==3.3.0 python-jose[cryptography]==3.5.0
passlib[bcrypt]==1.7.4 passlib[bcrypt]==1.7.4
bcrypt==4.0.1 bcrypt==4.0.1
python-multipart==0.0.12 python-multipart==0.0.22
apscheduler==3.10.4 apscheduler==3.10.4
python-nmap==0.7.1 python-nmap==0.7.1
pyyaml==6.0.2 pyyaml==6.0.2