fix(deps): bump lxml-html-clean 0.3.1 → 0.4.0 (XSS CWE-79 CVSS 8.4)
Tristan committed
Mar 9, 2026 at 17:14 UTC
30835c2ff4bebba1acdf3df35b7b9b53fd8ec526
1 file changed
+1
-1
requirements.txt
+1
-1
@@ -17,7 +17,7 @@ langchain-core==0.3.49
17
langchain-community==0.3.19
18
langchain-unstructured[all-docs]==0.1.6
19
openai-whisper==20250625
20
-lxml_html_clean==0.3.1
20
+lxml_html_clean>=0.4.0 # CVE-2024-52595 fix: XSS CWE-79 CVSS 8.4
21
markdown==3.7
22
mcp==1.22.0
23
newspaper3k==0.2.8