From f04fb36c2610d9a46dd35b9a193b247d5d11596e Mon Sep 17 00:00:00 2001 From: rickywu Date: Mon, 17 Jun 2024 10:51:48 +0800 Subject: [PATCH] upgrade version fix security bug (#1173) ### What problem does this PR solve? due to security problem, need updagre to fix, see bellow ### Type of change - [x] Other (please describe): Name| version | CVE | upgrade version -- | -- | -- | -- PyMySQL | 1.1.0 | CVE-2024-36039 | 1.1.1 Werkzeug | 3.0.1 | CVE-2024-34069 | 3.0.3 aiohttp | 3.9.3 | CVE-2024-30251 | 3.9.4 pillow | 10.2.0 | CVE-2024-28219 | 10.3.0 --- requirements.txt | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/requirements.txt b/requirements.txt index 4cc6dac50..d8f80c815 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,5 @@ accelerate==0.27.2 -aiohttp==3.9.3 +aiohttp==3.9.5 aiosignal==1.3.1 annotated-types==0.6.0 anyio==4.3.0 @@ -78,7 +78,7 @@ pandas==2.2.1 pdfminer.six==20221105 pdfplumber==0.10.4 peewee==3.17.1 -pillow==10.2.0 +pillow==10.3.0 protobuf==4.25.3 psutil==5.9.8 pyarrow==15.0.0 @@ -91,7 +91,7 @@ pycryptodomex==3.20.0 pydantic==2.6.2 pydantic_core==2.16.3 PyJWT==2.8.0 -PyMySQL==1.1.0 +PyMySQL==1.1.1 PyPDF2==3.0.1 pypdfium2==4.27.0 python-dateutil==2.8.2 @@ -125,7 +125,7 @@ triton==2.2.0 typing_extensions==4.10.0 tzdata==2024.1 urllib3==2.2.1 -Werkzeug==3.0.1 +Werkzeug==3.0.3 xgboost==2.0.3 XlsxWriter==3.2.0 xpinyin==0.7.6 @@ -143,4 +143,4 @@ selenium==4.21.0 webdriver-manager==4.0.1 cn2an==0.5.22 roman-numbers==1.0.2 -word2number==1.1 \ No newline at end of file +word2number==1.1