mirror of
https://github.com/NicolasBohn/NexQuant.git
synced 2026-07-27 23:47:46 +00:00
19b9d23952
- Upgrade Werkzeug from 2.2.3 to 2.3.8 in WebShop requirements - Translate all comments to English (project language policy) - Add security note for CVE-2024-34069 (debugger vulnerability) - Document mitigation: debug mode disabled in production Security Notes: - CVE-2024-34069 affects Werkzeug debugger (dev mode only) - Flask 3.x required for full fix, but incompatible with WebShop - Mitigation: Benchmark runs locally, never with debug=True in production - This is the latest secure version compatible with Flask 2.x Fixes Dependabot Alert #2 (GHSA-2g68-c3qc-8985)