Skip to content

Upgrade dependencies to address security vulnerabilities#218

Merged
tarekio merged 1 commit intomainfrom
pipaudit-security-fixes
Nov 7, 2025
Merged

Upgrade dependencies to address security vulnerabilities#218
tarekio merged 1 commit intomainfrom
pipaudit-security-fixes

Conversation

@level09
Copy link
Collaborator

@level09 level09 commented Nov 7, 2025

Upgrades vulnerable dependencies to fix security issues:

  • brotli 1.1.0 → 1.2.0 (fixes DoS vulnerability)
  • pip 25.2 → 25.3 (fixes arbitrary file overwrite)
  • pypdf 6.0.0 → 6.1.3 (fixes infinite loop and memory exhaustion)

All vulnerabilities identified via pip-audit and resolved.

@level09 level09 self-assigned this Nov 7, 2025
@coderabbitai
Copy link

coderabbitai bot commented Nov 7, 2025

Important

Review skipped

Auto reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch pipaudit-security-fixes

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@tarekio tarekio merged commit dc84616 into main Nov 7, 2025
11 checks passed
@tarekio tarekio deleted the pipaudit-security-fixes branch November 7, 2025 09:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants