⬆️(backend) upgrade idna to >=3.15 to address CVE-2026-45409

Pin idna to >=3.15 via uv constraint-dependencies to fix a moderate
severity (CVSS 5.3) information disclosure vulnerability. The flaw is
network-exploitable with no authentication required.
This commit is contained in:
lebaudantoine
2026-06-04 17:14:31 +02:00
committed by aleb_the_flash
parent 8c3d1bdd95
commit aca3261a9a
2 changed files with 4 additions and 3 deletions
+1
View File
@@ -22,6 +22,7 @@ and this project adheres to
- 🔇(summary) make ffmpeg quiet #1404
- 🔒️(backend) prevent accessing files if they are not ready #1395
- ⬆️(backend) upgrade idna to >=3.15 to address CVE-2026-45409
## [1.18.0] - 2026-06-03