mirror of
https://github.com/reconurge/flowsint.git
synced 2026-07-20 20:43:44 -05:00
pip-audit reported 27 vulnerabilities across 12 packages, including cryptography PYSEC-2026-36 (CVSS 9.8) used by the vault, a starlette Host-header path bypass, and python-multipart arbitrary file write. - cryptography 45.0.7 -> 46.0.7 (pin was capped at <46) - fastapi 0.115 -> 0.136, pulling starlette 0.46 -> 1.2 - python-multipart 0.0.20 -> 0.0.32 - pyjwt, urllib3, aiohttp, lxml, idna, mako and transitive bumps - dev tools: pytest 8 -> 9 (requires pytest-httpx >=0.36), black 25 -> 26 All four module test suites pass (458 tests). pip-audit now reports no known vulnerabilities.
30 lines
699 B
TOML
30 lines
699 B
TOML
[project]
|
|
name = "flowsint"
|
|
version = "1.2.8"
|
|
description = "Flowsint multi-module project"
|
|
authors = [{ name = "dextmorgn", email = "contact@flowsint.io" }]
|
|
requires-python = ">=3.12,<4.0"
|
|
dependencies = [
|
|
"flowsint-core",
|
|
"flowsint-types",
|
|
"flowsint-enrichers",
|
|
"flowsint-api",
|
|
"pydantic[email]>=2.11.7,<3.0.0",
|
|
"python-multipart>=0.0.27,<0.1.0",
|
|
"docker>=7.1.0,<8.0.0",
|
|
]
|
|
|
|
[tool.uv.workspace]
|
|
members = [
|
|
"flowsint-api",
|
|
"flowsint-core",
|
|
"flowsint-enrichers",
|
|
"flowsint-types",
|
|
]
|
|
|
|
[tool.uv.sources]
|
|
flowsint-core = { workspace = true }
|
|
flowsint-types = { workspace = true }
|
|
flowsint-enrichers = { workspace = true }
|
|
flowsint-api = { workspace = true }
|