Files
ServerKit/backend
Juan DenisandClaude Opus 4.8 9e511caba7 fix(deps): bump Authlib 1.6.11 -> 1.6.12 (CVE-2026-44681)
Safety flagged Authlib 1.6.11 for CVE-2026-44681 (MEDIUM): an open-redirect
via insufficient redirect_uri validation in the OAuth flow — directly
relevant since Authlib backs the SSO/OAuth login. 1.6.12 is the upstream fix
(patch bump, same 1.6.x line, lowest risk to the SSO code).

Authlib was pinned twice in requirements.txt; bumped both so they don't drift
into conflicting exact pins.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-05-31 20:06:58 -04:00
..