Commit Graph

  • 9b77753d33 fix: Remove clear-text storage of API key (CodeQL alert #8) TPTBusiness 2026-04-02 23:08:11 +02:00
  • 2eced3ca69 fix: Remove API key parameter from generate_api_config() TPTBusiness 2026-04-02 23:07:56 +02:00
  • 6b79d2639d fix: Remove API key parameter from generate_api_config() TPTBusiness 2026-04-02 23:07:56 +02:00
  • 15c944efef fix: Remove API key from test_benchmark_api.py config TPTBusiness 2026-04-02 23:07:32 +02:00
  • 6233375167 fix: Remove API key from test_benchmark_api.py config TPTBusiness 2026-04-02 23:07:32 +02:00
  • 28e45c9d10 fix: Prevent path injection in RL Job Summary UI TPTBusiness 2026-04-02 23:07:13 +02:00
  • cdbc80e658 fix: Prevent path injection in RL Job Summary UI TPTBusiness 2026-04-02 23:07:13 +02:00
  • adba526e94 fix: Remove API key presence detection from logging TPTBusiness 2026-04-02 23:06:57 +02:00
  • 92b2f3dc8e fix: Remove API key presence detection from logging TPTBusiness 2026-04-02 23:06:57 +02:00
  • 8e00b89996 fix: Improve path traversal prevention with dedicated helper function TPTBusiness 2026-04-02 23:06:29 +02:00
  • 7a9df5c3d8 fix: Improve path traversal prevention with dedicated helper function TPTBusiness 2026-04-02 23:06:29 +02:00
  • 20caf6d264 docs: Translate server.py docstring to English TPTBusiness 2026-04-02 23:06:10 +02:00
  • 126810c900 docs: Translate server.py docstring to English TPTBusiness 2026-04-02 23:06:10 +02:00
  • 40788b8670 docs: Translate server.py comments to English TPTBusiness 2026-04-02 23:06:05 +02:00
  • f08afc1ec9 docs: Translate server.py comments to English TPTBusiness 2026-04-02 23:06:05 +02:00
  • 2819423b4b fix: Refactor path validation to fix CodeQL alert #16 TPTBusiness 2026-04-02 23:05:42 +02:00
  • 1fb3d87fd6 fix: Refactor path validation to fix CodeQL alert #16 TPTBusiness 2026-04-02 23:05:42 +02:00
  • d95f509efe fix: Prevent path injection in FT Job Summary UI TPTBusiness 2026-04-02 23:05:25 +02:00
  • 98098dfa35 fix: Prevent path injection in FT Job Summary UI TPTBusiness 2026-04-02 23:05:25 +02:00
  • 8c309b8099 chore: Document torch CVE-2025-2953 is already fixed TPTBusiness 2026-04-02 23:04:09 +02:00
  • 4325e0b2ab chore: Document torch CVE-2025-2953 is already fixed TPTBusiness 2026-04-02 23:04:09 +02:00
  • 79df01f82a chore: Add CVE-2025-6638 to transformers security notes TPTBusiness 2026-04-02 23:03:18 +02:00
  • ceb4ff38c8 chore: Add CVE-2025-6638 to transformers security notes TPTBusiness 2026-04-02 23:03:18 +02:00
  • a53161930e chore: Document transformers CVE-2025-3777 is already fixed TPTBusiness 2026-04-02 23:03:03 +02:00
  • 417dbc070f chore: Document transformers CVE-2025-3777 is already fixed TPTBusiness 2026-04-02 23:03:03 +02:00
  • a2d977ff78 chore: Update Flask to fix CVE-2026-27205 TPTBusiness 2026-04-02 23:01:10 +02:00
  • c830c37606 chore: Update Flask to fix CVE-2026-27205 TPTBusiness 2026-04-02 23:01:10 +02:00
  • 5cae7247f0 chore: Document transformers CVE-2025-1194 is already fixed TPTBusiness 2026-04-02 23:01:07 +02:00
  • 971d92d76f chore: Document transformers CVE-2025-1194 is already fixed TPTBusiness 2026-04-02 23:01:07 +02:00
  • 31ad73b531 chore: Update torch to 2.8.0 (CVE-2025-3730 fix) TPTBusiness 2026-04-02 23:00:28 +02:00
  • f328f31450 chore: Update torch to 2.8.0 (CVE-2025-3730 fix) TPTBusiness 2026-04-02 23:00:28 +02:00
  • e393339cbe chore: Document transformers CVE-2025-3263 is already fixed TPTBusiness 2026-04-02 23:00:18 +02:00
  • e759e3bba3 chore: Document transformers CVE-2025-3263 is already fixed TPTBusiness 2026-04-02 23:00:18 +02:00
  • 212aad8130 chore: Update transformers to 4.53.0 (CVE-2025-6051 fix) TPTBusiness 2026-04-02 22:59:56 +02:00
  • 5bbe631eb5 chore: Update transformers to 4.53.0 (CVE-2025-6051 fix) TPTBusiness 2026-04-02 22:59:56 +02:00
  • 3dba0931b4 chore: Update transformers to fix CVE-2025-3933 (ReDoS) TPTBusiness 2026-04-02 22:59:38 +02:00
  • afbce03551 chore: Update transformers to fix CVE-2025-3933 (ReDoS) TPTBusiness 2026-04-02 22:59:38 +02:00
  • 8c64df87df chore: Add CVE-2025-2099 to transformers security notes TPTBusiness 2026-04-02 22:59:18 +02:00
  • 355366026a chore: Add CVE-2025-2099 to transformers security notes TPTBusiness 2026-04-02 22:59:18 +02:00
  • 83e18e27f3 fix: Override webshop's Werkzeug dependency to fix CVE-2026-27199 TPTBusiness 2026-04-02 22:59:10 +02:00
  • dfbc456840 fix: Override webshop's Werkzeug dependency to fix CVE-2026-27199 TPTBusiness 2026-04-02 22:59:10 +02:00
  • 12120f99d2 chore: Update transformers to fix CVE-2025-3264 (ReDoS) TPTBusiness 2026-04-02 22:58:53 +02:00
  • bd24e0f844 chore: Update transformers to fix CVE-2025-3264 (ReDoS) TPTBusiness 2026-04-02 22:58:53 +02:00
  • 33d07a4fb9 chore: Fix picomatch Method Injection vulnerability (CVE-2026-33672) TPTBusiness 2026-04-02 22:58:13 +02:00
  • 63c6fce20e chore: Fix picomatch Method Injection vulnerability (CVE-2026-33672) TPTBusiness 2026-04-02 22:58:13 +02:00
  • ef874a943f chore: Update pydantic to 2.4.0 (CVE-2024-3772 fix) TPTBusiness 2026-04-02 22:58:12 +02:00
  • 44f50e55a9 chore: Update pydantic to 2.4.0 (CVE-2024-3772 fix) TPTBusiness 2026-04-02 22:58:12 +02:00
  • 0ab4dd35fa chore: Fix PostCSS line return parsing error (CVE-2023-44270) TPTBusiness 2026-04-02 22:57:23 +02:00
  • b635839571 chore: Fix PostCSS line return parsing error (CVE-2023-44270) TPTBusiness 2026-04-02 22:57:23 +02:00
  • 7006c9469e chore: Add CVE-2023-46136 to Werkzeug security notes TPTBusiness 2026-04-02 22:57:09 +02:00
  • 2220257e12 chore: Add CVE-2023-46136 to Werkzeug security notes TPTBusiness 2026-04-02 22:57:09 +02:00
  • c443314868 chore: Fix braces memory exhaustion vulnerability (CVE-2024-4068) TPTBusiness 2026-04-02 22:56:53 +02:00
  • 504c32824e chore: Fix braces memory exhaustion vulnerability (CVE-2024-4068) TPTBusiness 2026-04-02 22:56:53 +02:00
  • fe8ee4e8dd chore: Fix Werkzeug CVEs with upgrade to 3.1.6 TPTBusiness 2026-04-02 22:56:15 +02:00
  • e347bc3cbb chore: Fix Werkzeug CVEs with upgrade to 3.1.6 TPTBusiness 2026-04-02 22:56:15 +02:00
  • 197b5ab51b chore: Update Werkzeug to fix CVE-2025-66221 TPTBusiness 2026-04-02 22:55:56 +02:00
  • 6ce5ae77cf chore: Update Werkzeug to fix CVE-2025-66221 TPTBusiness 2026-04-02 22:55:56 +02:00
  • bbb06b2115 chore: Add CVE-2024-49767 to Werkzeug security notes TPTBusiness 2026-04-02 22:55:09 +02:00
  • 638ad9aa0c chore: Add CVE-2024-49767 to Werkzeug security notes TPTBusiness 2026-04-02 22:55:09 +02:00
  • a935786e2b chore: Document vLLM CVE-2026-22807 is already fixed TPTBusiness 2026-04-02 22:54:58 +02:00
  • c5df30482e chore: Document vLLM CVE-2026-22807 is already fixed TPTBusiness 2026-04-02 22:54:58 +02:00
  • 5881a3f776 chore: Add CVE-2026-22807 to vllm security fix comment TPTBusiness 2026-04-02 22:54:29 +02:00
  • 7351eed80d chore: Add CVE-2026-22807 to vllm security fix comment TPTBusiness 2026-04-02 22:54:29 +02:00
  • ba43e83ac1 chore: Fix lodash-es Code Injection vulnerability (CVE-2026-4800) TPTBusiness 2026-04-02 22:53:07 +02:00
  • 602a54152b chore: Fix lodash-es Code Injection vulnerability (CVE-2026-4800) TPTBusiness 2026-04-02 22:53:07 +02:00
  • 71ddbe1a64 chore: Update vllm security fix comment (CVE-2026-22778) TPTBusiness 2026-04-02 22:52:29 +02:00
  • 448f7ffec4 chore: Update vllm security fix comment (CVE-2026-22778) TPTBusiness 2026-04-02 22:52:29 +02:00
  • 56176a581e chore: Update torch to 2.6.0 (CVE-2025-32434, CVE-2024-31580 fix) TPTBusiness 2026-04-02 22:51:31 +02:00
  • c1243da802 chore: Update torch to 2.6.0 (CVE-2025-32434, CVE-2024-31580 fix) TPTBusiness 2026-04-02 22:51:31 +02:00
  • 19b9d23952 fix: Update Werkzeug to 2.3.8 (latest secure 2.x version) TPTBusiness 2026-04-02 22:51:30 +02:00
  • ee5b369fae fix: Update Werkzeug to 2.3.8 (latest secure 2.x version) TPTBusiness 2026-04-02 22:51:30 +02:00
  • e25da63862 chore: Update torch to 2.6.0 (CVE-2025-32434 fix) TPTBusiness 2026-04-02 22:51:13 +02:00
  • 22f2488e55 chore: Update torch to 2.6.0 (CVE-2025-32434 fix) TPTBusiness 2026-04-02 22:51:13 +02:00
  • 46720b30b6 chore: Update transformers to 4.48.0 (CVE-2024-11393 fix) TPTBusiness 2026-04-02 22:50:10 +02:00
  • dc6521949c chore: Update transformers to 4.48.0 (CVE-2024-11393 fix) TPTBusiness 2026-04-02 22:50:10 +02:00
  • 194844a524 test: Fix UI security tests with proper Path mocking TPTBusiness 2026-04-02 22:47:45 +02:00
  • 71eddccc96 test: Fix UI security tests with proper Path mocking TPTBusiness 2026-04-02 22:47:45 +02:00
  • a33b29e782 test: Add security tests for GitHub Issue #13 path traversal vulnerability TPTBusiness 2026-04-02 22:47:11 +02:00
  • 72298721b6 test: Add security tests for GitHub Issue #13 path traversal vulnerability TPTBusiness 2026-04-02 22:47:11 +02:00
  • e1e86e1bd3 feat: Add advanced ML models (Transformer, TCN, PatchTST, CNN+LSTM) TPTBusiness 2026-04-02 22:44:05 +02:00
  • e9f1b6d0f6 feat: Add advanced ML models (Transformer, TCN, PatchTST, CNN+LSTM) TPTBusiness 2026-04-02 22:44:05 +02:00
  • 19855ef7d6 feat: Add model loader system (same as prompts) TPTBusiness 2026-04-02 22:40:46 +02:00
  • f01960ab55 feat: Add model loader system (same as prompts) TPTBusiness 2026-04-02 22:40:46 +02:00
  • 18416da2c9 feat: Centralize all prompts in prompts/ directory TPTBusiness 2026-04-02 22:29:31 +02:00
  • 59e5aeb9d0 feat: Centralize all prompts in prompts/ directory TPTBusiness 2026-04-02 22:29:31 +02:00
  • b9a3fde6f6 Remove documentation link from README Trading Prediction Technology 2026-04-02 22:20:33 +02:00
  • f915f2d0a6 Remove documentation link from README Trading Prediction Technology 2026-04-02 22:20:33 +02:00
  • f3e947bf52 Remove CI badge from README Trading Prediction Technology 2026-04-02 22:19:56 +02:00
  • c1d38a7a90 Remove CI badge from README Trading Prediction Technology 2026-04-02 22:19:56 +02:00
  • 5caa966597 Fix license and star badge links in README Trading Prediction Technology 2026-04-02 22:19:30 +02:00
  • d5e5b30013 Fix license and star badge links in README Trading Prediction Technology 2026-04-02 22:19:30 +02:00
  • e8db046289 Update README links to TPTBusiness repository Trading Prediction Technology 2026-04-02 22:18:07 +02:00
  • bcb93ddb4f Update README links to TPTBusiness repository Trading Prediction Technology 2026-04-02 22:18:07 +02:00
  • a0f46e9690 Fix TradingAgents repository link in README Trading Prediction Technology 2026-04-02 22:15:55 +02:00
  • 4fe81b6451 Fix TradingAgents repository link in README Trading Prediction Technology 2026-04-02 22:15:55 +02:00
  • ab5fa78611 fix: Disable Flask debug mode by default (Security Alert #2) TPTBusiness 2026-04-02 22:10:44 +02:00
  • 8285ae45e0 fix: Disable Flask debug mode by default (Security Alert #2) TPTBusiness 2026-04-02 22:10:44 +02:00
  • 848019d201 fix: Prevent path traversal in RL UI app.py TPTBusiness 2026-04-02 22:09:21 +02:00
  • a3d3b2f3b6 fix: Prevent path traversal in RL UI app.py TPTBusiness 2026-04-02 22:09:21 +02:00
  • 5bd5416c27 fix: Prevent path traversal in get_job_options() app.py TPTBusiness 2026-04-02 22:07:50 +02:00