Skip to content

Commit 30a6957

Browse files
fix(deps): update constraint-dependencies for aiohttp
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
1 parent 3e6be92 commit 30a6957

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

pyproject.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ fallback_version = "1.0.3.dev0"
88
[tool.uv]
99
required-version = ">=0.7.0"
1010
constraint-dependencies = [
11-
"aiohttp>=3.13.4", # CVE-2026-34514 + 9 more: CRLF injection, header leak, DoS
11+
"aiohttp>=3.14.0", # CVE-2026-34514 + 9 more: CRLF injection, header leak, DoS
1212
"authlib>=1.6.11", # CVE-2026-41425 + 7 more: account takeover, JWE padding oracle, sig bypass
1313
"cryptography>=46.0.7", # CVE-2026-39892: buffer overflow; CVE-2026-34073: DNS constraint bypass
1414
"fonttools>=4.60.2",

uv.lock

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)