Skip to content

Commit 7ca4344

Browse files
moshemoradclaude
andcommitted
Fix urllib3 CVE-2026-44431/44432 in enforcer requirements
Bump urllib3 2.6.3 -> 2.7.0 in enforcer/requirements.txt to fix the decompression-bomb streaming-API bypass (Dependabot alert #76, HIGH). The root requirements.txt and poetry.lock are already on 2.7.0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1 parent 4315f04 commit 7ca4344

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

enforcer/requirements.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,4 +7,4 @@ cachetools==5.3.3
77
prometheus-client==0.20.0
88
kubernetes==26.1.0
99
pyasn1>=0.6.2
10-
urllib3==2.6.3
10+
urllib3==2.7.0

0 commit comments

Comments
 (0)