From 3ea93f5999d9c0e314f925e3023096880e65dfee Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 15 Apr 2026 21:26:43 +0000 Subject: [PATCH] chore(deps): bump python-multipart Bumps the pip group with 1 update in the /cp2b-workspace/NewLook/backend directory: [python-multipart](https://github.com/Kludex/python-multipart). Updates `python-multipart` from 0.0.22 to 0.0.26 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md) - [Commits](https://github.com/Kludex/python-multipart/compare/0.0.22...0.0.26) --- updated-dependencies: - dependency-name: python-multipart dependency-version: 0.0.26 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] --- cp2b-workspace/NewLook/backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cp2b-workspace/NewLook/backend/requirements.txt b/cp2b-workspace/NewLook/backend/requirements.txt index 76077af5..5ba9c758 100644 --- a/cp2b-workspace/NewLook/backend/requirements.txt +++ b/cp2b-workspace/NewLook/backend/requirements.txt @@ -13,7 +13,7 @@ alembic==1.13.0 # python-jose removed: library is unmaintained and has unfixed CVEs (algorithm confusion). # JWT verification is handled by Supabase (supabase.auth.get_user) — no local JWT lib needed. passlib[bcrypt]==1.7.4 -python-multipart==0.0.22 # Updated from 0.0.20 — fixes CVE-2026-24486 +python-multipart==0.0.26 # Updated from 0.0.20 — fixes CVE-2026-24486 # Environment and Configuration python-dotenv==1.0.0