Skip to content

Commit c557b0a

Browse files
GWealecopybara-github
authored andcommitted
fix: Update FastAPI and Starlette to fix CVE-2025-62727 (ReDoS vulnerability)
Update fastapi constraint from <0.119.0 to <0.124.0 Update starlette minimum version from >=0.46.2 to >=0.49.1 Closes #3822 Co-authored-by: George Weale <[email protected]> PiperOrigin-RevId: 840372879
1 parent f273517 commit c557b0a

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

pyproject.toml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ dependencies = [
3030
"anyio>=4.9.0, <5.0.0", # For MCP Session Manager
3131
"authlib>=1.5.1, <2.0.0", # For RestAPI Tool
3232
"click>=8.1.8, <9.0.0", # For CLI tools
33-
"fastapi>=0.115.0, <0.119.0", # FastAPI framework
33+
"fastapi>=0.115.0, <0.124.0", # FastAPI framework
3434
"google-api-python-client>=2.157.0, <3.0.0", # Google API client discovery
3535
"google-cloud-aiplatform[agent_engines]>=1.125.0, <2.0.0", # For VertexAI integrations, e.g. example store.
3636
"google-cloud-bigquery-storage>=2.0.0",
@@ -59,7 +59,7 @@ dependencies = [
5959
"requests>=2.32.4, <3.0.0",
6060
"sqlalchemy-spanner>=1.14.0", # Spanner database session service
6161
"sqlalchemy>=2.0, <3.0.0", # SQL database ORM
62-
"starlette>=0.46.2, <1.0.0", # For FastAPI CLI
62+
"starlette>=0.49.1, <1.0.0", # For FastAPI CLI
6363
"tenacity>=9.0.0, <10.0.0", # For Retry management
6464
"typing-extensions>=4.5, <5",
6565
"tzlocal>=5.3, <6.0", # Time zone utilities

0 commit comments

Comments
 (0)