zlei6/ragflow
1
0
Fork 0
mirror of https://github.com/infiniflow/ragflow.git synced 2026-07-24 17:36:47 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: remediate CVE-2026-53533 by upgrading aiosmtplib to >=5.1.1 (#17264)

Browse Source 
## Summary
  
Bumps `aiosmtplib` from `>=5.0.0` to `>=5.1.1,<6.0.0` in
`pyproject.toml`.
  
  | CVE | Severity | Package | Installed | Fixed in |
  |---|---|---|---|---|
  | CVE-2026-53533 | MEDIUM | aiosmtplib | 5.0.0 | 5.1.1 |
  
This is a direct dependency upgrade, no override or constraint needed.
This commit is contained in:
rayhan
2026-07-23 03:42:41 +01:00
committed by GitHub
parent d0a48816bb
commit 3bc39f94e8
2 changed files with 11 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pyproject.toml
View File

@@ -12,7 +12,7 @@ dependencies = [
# so any import of the discord package raises ImportError on Python 3.13 — even in
# tests that never use voice features. audioop-lts provides the module as a backport.
"audioop-lts>=0.2.1",
"aiosmtplib>=5.0.0",
"aiosmtplib>=5.1.1,<6.0.0",
"akshare>=1.15.78,<2.0.0",
"anthropic==0.76.0",
"arxiv==2.1.3",