TPTBusiness fe8ee4e8dd chore: Fix Werkzeug CVEs with upgrade to 3.1.6 ...

- Upgrade Werkzeug from 2.3.8 to 3.1.6 (fixes all Werkzeug CVEs)
- Upgrade Flask from 2.2.5 to 3.0.0+ (required for Werkzeug 3.x)
- Add CVE-2024-49766 (safe_join UNC path bypass) to security notes
- Update comments to reflect Flask 3.x compatibility

Fixed CVEs:
- CVE-2025-66221: Windows device names in safe_join()
- CVE-2024-49766: safe_join UNC path bypass on Windows
- CVE-2024-34069: Werkzeug debugger RCE
- CVE-2024-49767: Resource exhaustion via multipart/form-data

Fixes Dependabot Alerts #2, #3, #4

2026-04-02 22:56:15 +02:00

..

app

feat: Add model loader system (same as prompts)

2026-04-02 22:40:46 +02:00

components

feat: Add model loader system (same as prompts)

2026-04-02 22:40:46 +02:00

core

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00

oai

feat: add LLM-finetune scenario (#1314)

2026-03-02 19:04:10 +08:00

scenarios

chore: Fix Werkzeug CVEs with upgrade to 3.1.6

2026-04-02 22:56:15 +02:00

utils

feat: add a web UI server (#1345)

2026-03-18 14:04:52 +08:00