chore(deps): bump authlib from 1.6.12 to 1.7.2 in /backend (#258)
Bumps [authlib](https://github.com/authlib/authlib) from 1.6.12 to 1.7.2. - [Release notes](https://github.com/authlib/authlib/releases) - [Commits](https://github.com/authlib/authlib/compare/1.6.12...v1.7.2) --- updated-dependencies: - dependency-name: authlib dependency-version: 1.7.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Christian Krakau-Louis <christianlouis@gmail.com>
This commit is contained in:
@@ -15,7 +15,7 @@ asyncpg==0.31.0
|
||||
python-jose[cryptography]==3.5.0 # Updated: Fixed algorithm confusion with OpenSSH ECDSA keys (was 3.3.0)
|
||||
bcrypt==5.0.0
|
||||
python-multipart==0.0.29 # Updated: Fixed multiple vulnerabilities (was 0.0.6)
|
||||
authlib==1.6.12 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6)
|
||||
authlib==1.7.2 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6)
|
||||
httpx==0.28.1
|
||||
|
||||
# Payment Processing
|
||||
|
||||
Reference in New Issue
Block a user