Merge pull request #185 from christianlouis/dependabot/pip/backend/python-multipart-0.0.26

chore(deps): bump python-multipart from 0.0.24 to 0.0.26 in /backend
This commit is contained in:
Christian Krakau-Louis
2026-04-19 02:24:20 +02:00
committed by GitHub
+1 -1
View File
@@ -14,7 +14,7 @@ asyncpg==0.31.0
python-jose[cryptography]==3.5.0 # Updated: Fixed algorithm confusion with OpenSSH ECDSA keys (was 3.3.0)
bcrypt==5.0.0
python-multipart==0.0.24 # Updated: Fixed multiple vulnerabilities (was 0.0.6)
python-multipart==0.0.26 # Updated: Fixed multiple vulnerabilities (was 0.0.6)
authlib==1.6.9 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6)
httpx==0.28.1