b6a4f17cbe
- requests: bump minimum to >=2.33.0 (CVE temp file reuse) - streamlit: bump minimum to >=1.54.0 (SSRF/NTLM exposure) - picomatch: add npm override for >=2.3.2/<3 || >=4.0.4 (ReDoS + method injection) - flatted: tighten override to >=3.4.2 (prototype pollution) - yaml: add npm override for >=1.10.3 (stack overflow) - rustls-webpki: cargo update to 0.103.10 (CRL distribution point) - Also fix pre-existing ty lint error in metrics.py (type: ignore for Windows resource import) - Pygments: no patch available (<=2.19.2 vulnerable, no fix released) |
||
|---|---|---|
| .. | ||
| agno | ||
| ai-sdk | ||
| chat | ||
| claude-code | ||
| crewai | ||
| hermes | ||
| langgraph | ||
| litellm | ||
| nemoclaw | ||
| openclaw | ||
| pydantic-ai | ||
| strands | ||