Skip to content

Commit 4884cb9

Browse files
chore(deps): bump pypdf from 6.13.3 to 6.14.2 in /mkdocs (#518)
Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.13.3 to 6.14.2. - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@6.13.3...6.14.2) --- updated-dependencies: - dependency-name: pypdf dependency-version: 6.14.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent aba57ae commit 4884cb9

2 files changed

Lines changed: 5 additions & 5 deletions

File tree

mkdocs/pyproject.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ dependencies = [
2323
"langgraph-checkpoint>=4.1.1", # JsonPlusSerializer RCE in "json" mode
2424
"llama-index>=0.14.22,<0.15",
2525
"llama-index-core>=0.14.22,<0.15",
26-
"pypdf>=6.13.3", # CVE-2026-*: decompression-bomb / RAM exhaustion in PDF parsing
26+
"pypdf>=6.14.2", # CVE-2026-*: decompression-bomb / RAM exhaustion in PDF parsing
2727
"nltk>=3.10.0", # CVE-2025-14009: zip slip / RCE in downloader
2828
"orjson>=3.11.6", # CVE-2025-67221: recursion limit for deeply nested JSON
2929
"pillow>=12.3.0", # CVE-2025-48379, CVE-2026-25990

mkdocs/uv.lock

Lines changed: 4 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)