mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-11-09 05:24:49 +09:00
Safety flagged Authlib 1.6.11 for CVE-2026-44681 (MEDIUM): an open-redirect via insufficient redirect_uri validation in the OAuth flow — directly relevant since Authlib backs the SSO/OAuth login. 1.6.12 is the upstream fix (patch bump, same 1.6.x line, lowest risk to the SSO code). Authlib was pinned twice in requirements.txt; bumped both so they don't drift into conflicting exact pins. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>