From 8ff95bf69df6f294198cb4c01d4621053e2fbe55 Mon Sep 17 00:00:00 2001 From: Pavel Tisnovsky Date: Sun, 19 Apr 2026 19:29:22 +0200 Subject: [PATCH] LCORE-1881: Fixes CVE in authlib --- requirements-build.txt | 1 + requirements.hashes.source.txt | 9 ++++++--- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/requirements-build.txt b/requirements-build.txt index 797c87cfb..fe1fd4909 100644 --- a/requirements-build.txt +++ b/requirements-build.txt @@ -140,6 +140,7 @@ setuptools==82.0.1 # googleapis-common-protos # greenlet # grpc-google-iam-v1 + # joserfc # llama-stack # llama-stack-api # markupsafe diff --git a/requirements.hashes.source.txt b/requirements.hashes.source.txt index 32ca5d747..246788ad0 100644 --- a/requirements.hashes.source.txt +++ b/requirements.hashes.source.txt @@ -132,9 +132,9 @@ aiohttp==3.13.5 \ attrs==26.1.0 \ --hash=sha256:c647aa4a12dfbad9333ca4e71fe62ddc36f4e63b2d260a37a8b83d2f043ac309 \ --hash=sha256:d03ceb89cb322a8fd706d4fb91940737b6642aa36998fe130a9bc96c985eff32 -authlib==1.6.9 \ - --hash=sha256:d8f2421e7e5980cc1ddb4e32d3f5fa659cfaf60d8eaf3281ebed192e4ab74f04 \ - --hash=sha256:f08b4c14e08f0861dc18a32357b33fbcfd2ea86cfe3fe149484b4d764c4a0ac3 +authlib==1.7.0 \ + --hash=sha256:b3e326c9aa9cc3ea95fe7d89fd880722d3608da4d00e8a27e061e64b48d801d5 \ + --hash=sha256:e36817afb02f6f0b6bf55f150782499ddd6ddf44b402bb055d3263cc65ac9ae0 autoevals==0.2.0 \ --hash=sha256:83546e86f716d5bea64de39db2e99f5eaeadd70d3f72481a75b576bc511e21d6 \ --hash=sha256:dec041989ce85d6043ba30efa959527c213a62f768dc54e77d41364510e1acb6 @@ -500,6 +500,9 @@ grpc-google-iam-v1==0.14.4 \ huggingface-hub==0.36.2 \ --hash=sha256:1934304d2fb224f8afa3b87007d58501acfda9215b334eed53072dd5e815ff7a \ --hash=sha256:48f0c8eac16145dfce371e9d2d7772854a4f591bcb56c9cf548accf531d54270 +joserfc==1.6.4 \ + --hash=sha256:34ce5f499bfcc5e9ad4cc75077f9278ab3227b71da9aaf28f9ab705f8a560d3c \ + --hash=sha256:3e4a22b509b41908989237a045e25c8308d5fd47ab96bdae2dd8057c6451003a jsonpath-ng==1.8.0 \ --hash=sha256:54252968134b5e549ea5b872f1df1168bd7defe1a52fed5a358c194e1943ddc3 \ --hash=sha256:b8dde192f8af58d646fc031fac9c99fe4d00326afc4148f1f043c601a8cfe138