Dependabot Alert: python-multipart vulnerable to Content-Type Header ReDoS

GSA / smartpay-training

Prototype for new GSA SmartPay training quizzes

8 stars 4 forks source link

Dependabot Alert: python-multipart vulnerable to Content-Type Header ReDoS #499

Open JennaySDavis opened 4 months ago

JennaySDavis commented 4 months ago

Upgrade python-multipart to fix 1 Dependabot alert in requirements.txt Upgrade python-multipart to version 0.0.7 or later. For example:

JennaySDavis commented 4 months ago

#499 Acceptance Criteria

Pass/Fail	Description
Pass	Smoke Testing/Spot Checking the application

Comments/Additional Notes This dependabot alert is a back-end library update. This is not related to a specific piece of functionality.

ADA Compliance (Automated scan via Chrome Lighthouse) This user story includes no new or modified interface features; additional accessibility validation is unnecessary.

Passed 2/26/24- JSD

johnbeallgsa commented 3 months ago

Thank you. Moving to Done.