Address CVEs

This updates: - Jinja2 (Python) (CVE-2024-56201) - nanoid (JavaScript) (CVE-2024-55565) - path-to-regexp (JavaScript) (CVE-2024-52798) - golang.org/x/net (Go) (CVE-2024-45338) Signed-off-by: mprahl <[email protected]>
kubeflow · Jan 14, 2025 · e7e8c90 · e7e8c90
1 parent 56e6116
commit e7e8c90
Show file tree

Hide file tree

Showing 21 changed files with 9,873 additions and 7,393 deletions.
diff --git a/backend/src/apiserver/visualization/requirements.in b/backend/src/apiserver/visualization/requirements.in
@@ -4,7 +4,7 @@ google-api-python-client==1.7.*
 itables==0.1.0
 ipykernel==5.1.1
 ipython==7.12.0
-jinja2==2.11.3
+Jinja2>=3.1.2,<4
 jupyter_client==5.3.*
 markupsafe==2.0.1
 nbconvert==5.5.0