Markus Heiser f96ac331ed [upd] pypi: Bump lxml from 6.0.4 to 6.1.0 (#6036) ...

Release 6.1.0 fixes a possible external entity injection (XXE) vulnerability in
``iterparse()`` and the ``ETCompatXMLParser``.

64ed06c1a0/CHANGES.txt (L42-L66)

- Closes https://github.com/searxng/searxng/issues/6025

Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>

2026-04-29 07:11:13 +02:00

342 B

Raw Blame History

View Raw