mirror of
https://github.com/infiniflow/ragflow.git
synced 2026-03-19 13:47:43 +08:00
c35b210c3a
### What problem does this PR solve? This PR remediates CVE-2024-47081 (MEDIUM severity) in the agent/sandbox component by upgrading the requests library from version 2.32.3 to 2.32.5. The vulnerability allows .netrc credentials to leak via malicious URLs. ### Type of change - [x] Bug Fix (non-breaking change which fixes an issue)
29 lines
519 B
TOML
29 lines
519 B
TOML
[project]
|
|
name = "gvisor-sandbox"
|
|
version = "0.1.0"
|
|
description = "Add your description here"
|
|
readme = "README.md"
|
|
requires-python = ">=3.12,<3.15"
|
|
dependencies = [
|
|
"fastapi>=0.115.12",
|
|
"httpx>=0.28.1",
|
|
"pydantic>=2.11.4",
|
|
"requests>=2.32.4",
|
|
"slowapi>=0.1.9",
|
|
"uvicorn>=0.34.2",
|
|
]
|
|
|
|
[[tool.uv.index]]
|
|
url = "https://pypi.tuna.tsinghua.edu.cn/simple"
|
|
|
|
[dependency-groups]
|
|
dev = [
|
|
"basedpyright>=1.29.1",
|
|
]
|
|
|
|
[tool.ruff]
|
|
line-length = 200
|
|
|
|
[tool.ruff.lint]
|
|
extend-select = ["C4", "SIM", "TCH"]
|