Skip to content

Commit 4b8169a

Browse files
committed
upgrade aiohttp to 3.13.3 to prevent zip bomb DoS
1 parent 11c86a2 commit 4b8169a

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

Dockerfile

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,8 +31,8 @@ ENV PATH="$VIRTUAL_ENV/bin:$PATH"
3131

3232
RUN /caikit/.venv/bin/pip install --no-cache-dir "urllib3>=2.6.0"
3333

34-
RUN /caikit/.venv/bin/pip install --no-cache-dir "fastapi==0.123.7" "starlette>=0.49.1,<0.51.0"
35-
34+
RUN /caikit/.venv/bin/pip install --no-cache-dir \
35+
"fastapi==0.123.7" "starlette>=0.49.1,<0.51.0" "aiohttp>=3.13.3,<4.0.0"
3636
RUN groupadd --system caikit --gid 1001 && \
3737
adduser --system --uid 1001 --gid 0 --groups caikit \
3838
--create-home --home-dir /caikit --shell /sbin/nologin \

0 commit comments

Comments
 (0)