From e6027792c68c77e10bae0d2577d4439bf7154396 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 17 May 2026 14:52:17 +0200 Subject: [PATCH] chore(deps): bump python-multipart from 0.0.26 to 0.0.28 in /backend (#246) Bumps [python-multipart](https://github.com/Kludex/python-multipart) from 0.0.26 to 0.0.28. - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](https://github.com/Kludex/python-multipart/compare/0.0.26...0.0.28) --- updated-dependencies: - dependency-name: python-multipart dependency-version: 0.0.28 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index def4571..ab23db6 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -14,7 +14,7 @@ asyncpg==0.31.0 python-jose[cryptography]==3.5.0 # Updated: Fixed algorithm confusion with OpenSSH ECDSA keys (was 3.3.0) bcrypt==5.0.0 -python-multipart==0.0.26 # Updated: Fixed multiple vulnerabilities (was 0.0.6) +python-multipart==0.0.28 # Updated: Fixed multiple vulnerabilities (was 0.0.6) authlib==1.6.9 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6) httpx==0.28.1