TPTBusiness ee5b369fae fix: Update Werkzeug to 2.3.8 (latest secure 2.x version) ...

- Upgrade Werkzeug from 2.2.3 to 2.3.8 in WebShop requirements
- Translate all comments to English (project language policy)
- Add security note for CVE-2024-34069 (debugger vulnerability)
- Document mitigation: debug mode disabled in production

Security Notes:
- CVE-2024-34069 affects Werkzeug debugger (dev mode only)
- Flask 3.x required for full fix, but incompatible with WebShop
- Mitigation: Benchmark runs locally, never with debug=True in production
- This is the latest secure version compatible with Flask 2.x

Fixes Dependabot Alert #2 (GHSA-2g68-c3qc-8985)

2026-04-02 22:51:30 +02:00

..

app

feat: Add model loader system (same as prompts)

2026-04-02 22:40:46 +02:00

components

feat: Add model loader system (same as prompts)

2026-04-02 22:40:46 +02:00

core

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00

oai

feat: add LLM-finetune scenario (#1314)

2026-03-02 19:04:10 +08:00

scenarios

fix: Update Werkzeug to 2.3.8 (latest secure 2.x version)

2026-04-02 22:51:30 +02:00

utils

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00