gitea-admin/gh-christianlouis-inboxconverge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: bump authlib 1.6.6 → 1.6.9 to patch four security vulnerabilities

Browse Source 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/a88d0d53-5145-4ae3-b86b-5374c55e4a2b
This commit is contained in:
copilot-swe-agent[bot]
2026-03-23 10:30:22 +00:00
parent 5c84441195
commit f7fc10f2dc
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/requirements.txt
+1 -1
View File
@@ -14,7 +14,7 @@ asyncpg==0.29.0
python-jose[cryptography]==3.3.0 python-jose[cryptography]==3.3.0
passlib[bcrypt]==1.7.4 passlib[bcrypt]==1.7.4
python-multipart==0.0.22 # Updated: Fixed multiple vulnerabilities (was 0.0.6) python-multipart==0.0.22 # Updated: Fixed multiple vulnerabilities (was 0.0.6)
authlib==1.6.6 # Updated: Fixed algorithm confusion and DoS vulnerabilities (was 1.3.0) authlib==1.6.9 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6)
httpx==0.26.0 httpx==0.26.0
# Payment Processing # Payment Processing