Files
gh-christianlouis-inboxconv…/backend
copilot-swe-agent[bot] 9f8f63ec17 Fix authlib security vulnerabilities: upgrade 1.6.6 -> 1.6.9
Fixes four CVEs:
- OIDC hash binding fail-open cryptographic verification
- JWE RSA1_5 Bleichenbacher padding oracle
- alg:none signature verification bypass
- JWS JWK header injection signature verification bypass

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/beb47db2-da25-416a-8fb0-c1452a3b22a7
2026-03-23 10:27:14 +00:00
..