mirror of
https://github.com/searxng/searxng.git
synced 2026-05-07 18:03:51 +02:00
Markus Heiser
f96ac331ed
Release 6.1.0 fixes a possible external entity injection (XXE) vulnerability in ``iterparse()`` and the ``ETCompatXMLParser``. https://github.com/lxml/lxml/blob/64ed06c1a0c1833bfac99f209f16c3bdfddfde79/CHANGES.txt#L42-L66 - Closes https://github.com/searxng/searxng/issues/6025 Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
20 lines
342 B
Plaintext
20 lines
342 B
Plaintext
certifi==2026.2.25
|
|
babel==2.18.0
|
|
flask-babel==4.0.0
|
|
flask==3.1.3
|
|
jinja2==3.1.6
|
|
lxml==6.1.0
|
|
pygments==2.20.0
|
|
python-dateutil==2.9.0.post0
|
|
pyyaml==6.0.3
|
|
httpx[http2]==0.28.1
|
|
httpx-socks[asyncio]==0.10.0
|
|
sniffio==1.3.1
|
|
valkey==6.1.1
|
|
markdown-it-py==4.0.0
|
|
msgspec==0.21.1
|
|
typer==0.24.1
|
|
isodate==0.7.2
|
|
whitenoise==6.12.0
|
|
typing-extensions==4.15.0
|