Commit 06d9e00
security: fix moderate vulnerabilities in AI sandbox dependencies
- Update requests from 2.31.0 to >=2.32.4 (CVE-2024-47081 - .netrc credentials leak)
- Update jinja2 from 3.1.2 to >=3.1.6 (multiple sandbox breakout vulnerabilities)
- Update black from 23.11.0 to >=24.3.0 (Regular Expression Denial of Service)
- Change from exact to minimum version constraints for better security posture
Fixes Dependabot alerts #2, #3, #4, #5, #6, #7, #8, #9
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>1 parent 0d4c6a4 commit 06d9e00
1 file changed
Lines changed: 3 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | | - | |
| 2 | + | |
3 | 3 | | |
4 | 4 | | |
5 | 5 | | |
6 | 6 | | |
7 | | - | |
| 7 | + | |
8 | 8 | | |
9 | 9 | | |
10 | | - | |
| 10 | + | |
11 | 11 | | |
12 | 12 | | |
0 commit comments