Skip to content

Commit 38a0047

Browse files
fix(deps): update constraint-dependencies for gitpython
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
1 parent 9987557 commit 38a0047

2 files changed

Lines changed: 25 additions & 25 deletions

File tree

pyproject.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ constraint-dependencies = [
1212
"authlib>=1.6.11", # CVE-2026-41425 + 7 more: account takeover, JWE padding oracle, sig bypass
1313
"cryptography>=48.0.1", # CVE-2026-39892: buffer overflow; CVE-2026-34073: DNS constraint bypass
1414
"fonttools>=4.60.2",
15-
"gitpython>=3.1.47", # Command injection via Git options bypass
15+
"gitpython>=3.1.52", # Command injection via Git options bypass
1616
"h11>=0.16.0",
1717
"idna>=3.15",
1818
"joserfc>=1.6.8",

uv.lock

Lines changed: 24 additions & 24 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)