Files
WELA/website/requirements.txt
T
Shirofune-SecurityandClaude Opus 4.8 1799178370 security(docs): bump mkdocs-material to 9.8.0 (CVE-2026-73295)
Bumps mkdocs-material 9.7.6 -> 9.8.0 (latest), which resolves Dependabot
alert #1. mkdocs-material 7.2.0 through 9.7.6 contains a DOM-based XSS in
the optional `search.suggest` feature via a crafted `q` URL parameter
(GHSA-xvg9-69gf-fjrf, CVE-2026-73295, CVSS 5.4); fixed in 9.7.7 and later.

Documentation-site build dependency only (website/requirements.txt, used by
.github/workflows/docs.yml); does not affect WELA itself.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-10-24 00:36:52 +09:00

8 lines
285 B
Plaintext

# Python dependencies for building the Hayabusa documentation site.
# Used by .github/workflows/docs.yml and for local previews:
# pip install -r website/requirements.txt
# mkdocs serve -f website/mkdocs.yml
mkdocs-material==9.8.0
mkdocs-glightbox==0.5.2
mkdocs-static-i18n==1.3.1