Feat/fix security issues

CHANGELOG.md

@@ -1,5 +1,26 @@
 # Release Notes
 
+## v26.01.1
+
+### Security fixes
+
+* CVE-2026-21441: Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API) #16
+* CVE-2026-21860: Werkzeug safe_join() allows Windows special device names with compound extensions #17
+* CVE-2025-66418: urllib3 allows an unbounded number of links in the decompression chain #14
+* CVE-2025-66471: urllib3 streaming API improperly handles highly compressed data #15
+* CVE-2024-6866: Flask-CORS vulnerable to Improper Handling of Case Sensitivity #9
+* CVE-2024-49769: Waitress has request processing race condition in HTTP pipelining with invalid first request #7
+* CVE-2024-49768: Waitress vulnerable to DoS leading to high CPU usage/resource exhaustion #6
+* CVE-2025-66221: Werkzeug safe_join() allows Windows special device names #13
+* CVE-2024-6844: Flask-CORS allows for inconsistent CORS matching #8
+* CVE-2025-50181: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation #11
+* CVE-2025-50182: urllib3 does not control redirects in browsers and Node.js #12
+* CVE-2024-6839: Flask-CORS improper regex path matching vulnerability #10
+
+### Misc
+
+* Various typos and style fixes.
+
 ## v26.01.0
 
 ### Highlights

backend.py

@@ -66,7 +66,7 @@ def get_backend_config_env(var_name, default_value=None):
 
 
 class Config:
-    version = "26.01.0"
+    version = "26.01.1"
     db_round_decimals = 6
     db_non_allocatable = "non-allocatable"
     db_billing_hourly_rate = ".billing-hourly-rate"

manifests/kube-opex-analytics/helm/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
-appVersion: "26.01.0"
+appVersion: "26.01.1"
 description: Helm chart for Kubernetes Opex Analytics
 name: kube-opex-analytics
-version: 26.01.0
+version: 26.01.1
 

manifests/kube-opex-analytics/kustomize/kustomization.yaml

@@ -14,4 +14,4 @@ resources:
 images:
   - name: kube-opex-analytics
     newName: docker.io/rchakode/kube-opex-analytics
-    newTag: 26.01.0
+    newTag: 26.01.1

manifests/kubeledger/helm/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
-appVersion: "26.01.0"
+appVersion: "26.01.1"
 description: Helm chart for KubeLedger
 name: kubeledger
-version: 26.01.0
+version: 26.01.1
 

manifests/kubeledger/kustomize/kustomization.yaml

@@ -14,4 +14,4 @@ resources:
 images:
   - name: kubeledger
     newName: ghcr.io/realopslabs/kubeledger
-    newTag: 26.01.0
+    newTag: 26.01.1

pyproject.toml

@@ -1,16 +1,18 @@
 [project]
 name = "kubeledger"
-version = "26.01.0"
+version = "26.01.1"
 description = "Open source Kubernetes resource usage tracking, accounting and optimization — CPU, memory, and GPU usage"
 readme = "README.md"
-requires-python = ">=3.8"
+requires-python = ">=3.12"
 dependencies = [
-    "flask",
-    "flask-cors",
-    "requests",
-    "rrdtool",
-    "prometheus-client",
-    "waitress",
+    "flask>=3.0.0",
+    "flask-cors>=6.0.0",
+    "requests>=2.32.3",
+    "rrdtool>=0.1.16",
+    "prometheus-client>=0.20.0",
+    "waitress>=3.0.1",
+    "urllib3>=2.6.3",
+    "werkzeug>=3.1.5",
 ]
 authors = [{ name = "Rodrigue Chakode", email = "rodrigue.chakode@gmail.com" }]