Skip to content

fix(deps): bump Werkzeug to 3.1.8 (CVE-2024-49767) - #3

Merged
oscarvalenzuelab merged 1 commit into
mainfrom
fix/bump-werkzeug
Jun 9, 2026
Merged

fix(deps): bump Werkzeug to 3.1.8 (CVE-2024-49767)#3
oscarvalenzuelab merged 1 commit into
mainfrom
fix/bump-werkzeug

Conversation

@oscarvalenzuelab

Copy link
Copy Markdown
Contributor

Summary

  • Bumps Werkzeug from 3.0.1 to 3.1.8 in dashboard/requirements.txt
  • Fixes CVE-2024-49767: resource exhaustion when parsing file data in forms

Test plan

  • CI passes
  • Dependabot alert clears after merge

@cla-bot cla-bot Bot added the cla-signed label Jun 9, 2026
@oscarvalenzuelab
oscarvalenzuelab merged commit b5beb8e into main Jun 9, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant