External/SnapOtter
1
0
Fork 0
mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(deps): patch Dependabot security alerts

Browse Source 
- Pillow 11.1.0 -> 12.2.0 (6 CVEs: OOB writes, decompression bomb, DoS)
- rembg 2.0.62 -> 2.0.75 (SSRF + path traversal in server component)
- @fastify/static ^8.1.0 -> ^9.1.3 (path traversal + route guard bypass)
- Remove redundant @fastify/static pnpm override
- Dismiss stale esbuild alert (already at 0.28.0)
- Dismiss file-type alert (16.5.4 is dev-only via @types/potrace)
This commit is contained in:
SnapOtter
2026-06-10 19:08:08 +08:00
parent 7c70c60b9e
commit 8792080982
6 changed files with 9 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/ai/python/requirements-gpu.txt
+2 -2
View File
@@ -1,10 +1,10 @@
rembg==2.0.62
rembg==2.0.75
realesrgan==0.3.0
paddleocr==2.9.1
paddlepaddle-gpu==3.0.0
mediapipe>=0.10.21
onnxruntime-gpu==1.20.1
numpy==1.26.4
Pillow==11.1.0
Pillow==12.2.0
opencv-python-headless==4.10.0.84
codeformer-pip==0.0.4
packages/ai/python/requirements.txt
+2 -2
View File
@@ -1,10 +1,10 @@
rembg[cpu]==2.0.62
rembg[cpu]==2.0.75
realesrgan==0.3.0
paddleocr[doc-parser]>=3.4.0,<3.5.0
paddlepaddle>=3.0.0,<3.1.0
mediapipe>=0.10.21
onnxruntime==1.20.1
numpy==1.26.4
Pillow==11.1.0
Pillow==12.2.0
opencv-python-headless==4.10.0.84
codeformer-pip==0.0.4