SHAdd0WTAka / Zen-Ai-Pentest / 23114555785

5%

push

github

fix: resolve all remaining Dependabot alerts (#138, #149, #150)

Update all requirements files to fix remaining vulnerabilities:

poc/backend/requirements.txt:
- cryptography==44.0.3 (CVE-2024-12356 - HIGH)
- weasyprint==65.1 (SSRF Bypass - HIGH)
- jinja2==3.1.7 (sandbox breakout - MEDIUM)
- markdown==3.8 (Uncaught Exception - MEDIUM)

requirements-deprecated/requirements-windows.txt:
- requests==2.32.4 (.netrc leak - MEDIUM)
- jinja2==3.1.7 (sandbox breakout - MEDIUM)
- langchain-core==0.3.84 (SSRF via image_url - LOW)
- langgraph==0.2.76 (msgpack deserialization - MEDIUM)

Add scripts/security_scan.py for local vulnerability scanning.

Fixes: #138, #149, #150
Closes all remaining Dependabot alerts (8/8)

Co-authored-by: root <root@SHA256.localdomain>

13 of 1234 branches covered (1.05%)

Branch coverage included in aggregate %.

599 of 11731 relevant lines covered (5.11%)

0.05 hits per line