From f479974a5a432183de01a5c58264ff9e35376d7d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 6 Apr 2026 07:18:55 +0000 Subject: [PATCH] chore(deps): bump python-multipart from 0.0.22 to 0.0.24 in /backend Bumps [python-multipart](https://github.com/Kludex/python-multipart) from 0.0.22 to 0.0.24. - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md) - [Commits](https://github.com/Kludex/python-multipart/compare/0.0.22...0.0.24) --- updated-dependencies: - dependency-name: python-multipart dependency-version: 0.0.24 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index 047c131..1d9703d 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -14,7 +14,7 @@ asyncpg==0.31.0 python-jose[cryptography]==3.5.0 # Updated: Fixed algorithm confusion with OpenSSH ECDSA keys (was 3.3.0) bcrypt==5.0.0 -python-multipart==0.0.22 # Updated: Fixed multiple vulnerabilities (was 0.0.6) +python-multipart==0.0.24 # Updated: Fixed multiple vulnerabilities (was 0.0.6) authlib==1.6.9 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6) httpx==0.28.1