Update dependencies to fix HIGH severity ReDoS vulnerability: - fastapi==0.128.0 - starlette==0.49.1 CVE-2025-62727 allows unauthenticated attackers to send crafted HTTP Range headers that trigger quadratic-time processing in FileResponse Range parsing, causing CPU exhaustion and DoS. Fixes #215
11 lines
213 B
Plaintext
11 lines
213 B
Plaintext
fastapi==0.128.0
|
|
starlette==0.49.1 # CVE-2025-62727: Fix ReDoS in Range header parsing
|
|
pydantic==2.11.4
|
|
uvicorn==0.29.0
|
|
mangum==0.17.0
|
|
tiktoken==0.9.0
|
|
requests==2.32.4
|
|
numpy==2.2.5
|
|
boto3==1.40.4
|
|
botocore==1.40.4
|