gavindiaz/NexQuant
1
0
Fork 0
mirror of https://github.com/NicolasBohn/NexQuant.git synced 2026-07-27 23:47:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: Add CVE-2023-46136 to Werkzeug security notes

Browse Source 
- Document CVE-2023-46136 (DoS via multipart/form-data parser)
- Already fixed by Werkzeug>=3.1.6 upgrade
- Fixes Dependabot Alert #1
This commit is contained in:
TPTBusiness
2026-04-02 22:57:09 +02:00
parent 504c32824e
commit 2220257e12
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rdagent/scenarios/rl/autorl_bench/benchmarks/webshop/requirements.txt
+1
View File
@@ -30,5 +30,6 @@ spacy==3.7.2
# - CVE-2024-49766: safe_join UNC path bypass on Windows (fixed in 3.0.6)
# - CVE-2024-34069: Werkzeug debugger RCE (fixed)
# - CVE-2024-49767: Resource exhaustion via multipart/form-data (fixed)
# - CVE-2023-46136: DoS via multipart/form-data parser (fixed in 2.3.8)
flask>=3.0.0
Werkzeug>=3.1.6 # Security fix: All Werkzeug CVEs fixed (Windows + Linux)