mirror of
https://github.com/searxng/searxng.git
synced 2026-07-18 14:01:24 +00:00
f96ac331ed
Release 6.1.0 fixes a possible external entity injection (XXE) vulnerability in
``iterparse()`` and the ``ETCompatXMLParser``.
64ed06c1a0/CHANGES.txt (L42-L66)
- Closes https://github.com/searxng/searxng/issues/6025
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
20 lines
342 B
Plaintext
20 lines
342 B
Plaintext
certifi==2026.2.25
|
|
babel==2.18.0
|
|
flask-babel==4.0.0
|
|
flask==3.1.3
|
|
jinja2==3.1.6
|
|
lxml==6.1.0
|
|
pygments==2.20.0
|
|
python-dateutil==2.9.0.post0
|
|
pyyaml==6.0.3
|
|
httpx[http2]==0.28.1
|
|
httpx-socks[asyncio]==0.10.0
|
|
sniffio==1.3.1
|
|
valkey==6.1.1
|
|
markdown-it-py==4.0.0
|
|
msgspec==0.21.1
|
|
typer==0.24.1
|
|
isodate==0.7.2
|
|
whitenoise==6.12.0
|
|
typing-extensions==4.15.0
|