Skip to content

fix: remediate 19 trivy-fs CVEs at the develop base + map non-list MinerU JSON to 502 #464

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
seonghobae wants to merge 5 commits into from
Closed

fix: remediate 19 trivy-fs CVEs at the develop base + map non-list MinerU JSON to 502 #464

Show file tree
Hide file tree
Changes from 2 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
e187bb8
fix(security): remediate 19 trivy-fs CVEs in uv.lock at the develop base
claude Jul 29, 2026
5e71683
docs(security): add explicit revisit date to the CVE-2026-61632 suppr…
claude Jul 29, 2026
3f8444c
fix(mineru): map non-list MinerU JSON to the documented 502 incomplet…
claude Jul 30, 2026
a10b843
fix(dom): map non-object MinerU blocks to 502 and unmask the dom_buil…
claude Jul 30, 2026
3733b07
fix(security): bump transitive click 8.3.2 -> 8.4.2 (CVE-2026-7246)
claude Jul 31, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions .trivyignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,3 +20,14 @@
# invoking the project build script, so forcing a non-root USER breaks fuzz CI.
# Revisit by 2026-10-31 or when ClusterFuzzLite supports non-root build output.
DS-0002

# CVE-2026-61632 affects pymdown-extensions (< 11.0.1), a docs-build-only
# transitive dependency pulled by mkdocs-material to render the MkDocs manual;
# it is never installed in the API image or the service runtime. The fix,
# pymdown-extensions 11.0.1, requires mkdocs-material >= 9.7, which this repo
# deliberately avoids: tests/test_project_metadata.py
# ::test_docs_theme_range_stays_below_warning_release pins mkdocs-material < 9.7
# because 9.7 ships the disruptive "mkdocs 2.0" deprecation banner. MEDIUM
# (CVSS 5.3). Revisit by 2026-10-31, or earlier when mkdocs-material 9.7+ is
# adopted or a fix backports to a 9.6-compatible pymdown-extensions release.
CVE-2026-61632
Loading
Loading