Skip to content

Upgrade Docs dep cairosvg to resolve CVE-2026-107378 - #64

Merged
cigamit merged 1 commit into
develfrom
CVE-2026-107378
Oct 13, 2026
Merged

cigamit merged 1 commit into
develfrom
CVE-2026-107378

Conversation

@cigamit

@cigamit cigamit commented Oct 13, 2026

Copy link
Copy Markdown
Collaborator

No description provided.

@cigamit
cigamit requested a review from TheWitness October 13, 2026 05:41
@cigamit cigamit self-assigned this Oct 13, 2026
Copilot AI balanced review requested due to automatic review settings October 13, 2026 05:41
@ciq-it-service-account

ciq-it-service-account commented Oct 13, 2026 •

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The dependency version exists and directly addresses the cited vulnerability.

0 open findings

What changed in this PR

Upgrades the documentation dependency to resolve CVE-2026-107378.

Changes:

  • Updates CairoSVG from 2.9.0 to 2.9.1.
File Description
docs/​requirements.txt Pins the patched CairoSVG release.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@cigamit
cigamit merged commit 9685e05 into devel Oct 13, 2026
5 checks passed
@cigamit
cigamit deleted the CVE-2026-107378 branch October 13, 2026 13:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

4 participants