[PR #18] [MERGED] Fix remaining vulnerable dependencies flagged by Safety CI #21

New issue

Closed

opened 2026-03-02 11:44:10 +03:00 by kerem · 0 comments

kerem commented

2026-03-02 11:44:10 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/jhd3197/ServerKit/pull/18
Author: @jhd3197
Created: 2/12/2026
Status: ✅ Merged
Merged: 2/12/2026
Merged by: @jhd3197

Base: main ← Head: dev

📝 Commits (2)

e5498af Fix remaining vulnerable dependencies flagged by Safety CI
5f0b70b chore: bump version to 1.2.86 [skip ci]

📊 Changes

2 files changed (+5 additions, -5 deletions)

View changed files

📝 VERSION (+1 -1)
📝 backend/requirements.txt (+4 -4)

📄 Description

Werkzeug 3.0.1 → 3.1.5 (5 vulnerabilities)
Flask-Cors 5.0.1 → 6.0.2 (3 vulnerabilities)
gunicorn 22.0.0 → 23.0.0 (TolerateDangerousFraming header issue)
cryptography 44.0.3 → 46.0.5 (CVE-2026-26007 improper input validation)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/jhd3197/ServerKit/pull/18 **Author:** [@jhd3197](https://github.com/jhd3197) **Created:** 2/12/2026 **Status:** ✅ Merged **Merged:** 2/12/2026 **Merged by:** [@jhd3197](https://github.com/jhd3197) **Base:** `main` ← **Head:** `dev` --- ### 📝 Commits (2) - [`e5498af`](https://github.com/jhd3197/ServerKit/commit/e5498af7642152e98babb8010f64b435e5edfa8d) Fix remaining vulnerable dependencies flagged by Safety CI - [`5f0b70b`](https://github.com/jhd3197/ServerKit/commit/5f0b70b06c4d029328635a7115208783056502be) chore: bump version to 1.2.86 [skip ci] ### 📊 Changes **2 files changed** (+5 additions, -5 deletions) <details> <summary>View changed files</summary> 📝 `VERSION` (+1 -1) 📝 `backend/requirements.txt` (+4 -4) </details> ### 📄 Description - Werkzeug 3.0.1 → 3.1.5 (5 vulnerabilities) - Flask-Cors 5.0.1 → 6.0.2 (3 vulnerabilities) - gunicorn 22.0.0 → 23.0.0 (TolerateDangerousFraming header issue) - cryptography 44.0.3 → 46.0.5 (CVE-2026-26007 improper input validation) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>