Skip to content

Commit 06d9e00

Browse files
PaulDuvallclaude
andcommitted
security: fix moderate vulnerabilities in AI sandbox dependencies
- Update requests from 2.31.0 to >=2.32.4 (CVE-2024-47081 - .netrc credentials leak) - Update jinja2 from 3.1.2 to >=3.1.6 (multiple sandbox breakout vulnerabilities) - Update black from 23.11.0 to >=24.3.0 (Regular Expression Denial of Service) - Change from exact to minimum version constraints for better security posture Fixes Dependabot alerts #2, #3, #4, #5, #6, #7, #8, #9 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
1 parent 0d4c6a4 commit 06d9e00

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
# AI Security Sandbox Dependencies
2-
black==23.11.0
2+
black>=24.3.0
33
flake8==6.1.0
44
mypy==1.7.0
55
pytest==7.4.3
66
pytest-cov==4.1.0
7-
requests==2.31.0
7+
requests>=2.32.4
88
pydantic==2.5.0
99
ipython==8.17.2
10-
jinja2==3.1.2
10+
jinja2>=3.1.6
1111
rich==13.7.0
1212
click==8.1.7

0 commit comments

Comments
 (0)