From 5266506b56c1b7cdda24a7c8f18b2e1e11128c6a Mon Sep 17 00:00:00 2001 From: bruno Date: Tue, 27 Oct 2026 23:20:35 -0400 Subject: [PATCH] [fix] Securite : plancher msgpack>=1.2.3 (CVE-2026-114613, pip-audit bloquant) --- backend/requirements.txt | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/backend/requirements.txt b/backend/requirements.txt index 3b500cf..b412ab7 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -75,3 +75,7 @@ filelock>=4.2.1 opentelemetry-api>=1.45.1 # Coffre Secrets (Phase 1a) : chiffrement par enveloppe AES-256-GCM. cryptography>=44.0 + +# Plancher de securite : msgpack est transitif, version 1.2.1 relevee par le job +# security (pip-audit, bloquant) — CVE-2026-114613, corrigee en 1.2.3. +msgpack>=1.2.3