Shirofune-SecurityandClaude Opus 4.8 1799178370 security(docs): bump mkdocs-material to 9.8.0 (CVE-2026-73295) ...

Bumps mkdocs-material 9.7.6 -> 9.8.0 (latest), which resolves Dependabot
alert #1. mkdocs-material 7.2.0 through 9.7.6 contains a DOM-based XSS in
the optional `search.suggest` feature via a crafted `q` URL parameter
(GHSA-xvg9-69gf-fjrf, CVE-2026-73295, CVSS 5.4); fixed in 9.7.7 and later.

Documentation-site build dependency only (website/requirements.txt, used by
.github/workflows/docs.yml); does not affect WELA itself.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-10-24 00:36:52 +09:00

..

docs

Report configuration-only audit states without rule coverage inference

2026-09-18 22:59:25 +09:00

scripts

docs: add Material for MkDocs documentation site (English + Japanese)

2026-06-29 09:50:48 +09:00

mkdocs.yml

docs: machine-translate WELA docs into 13 more languages

2026-06-29 10:13:11 +09:00

requirements.txt

security(docs): bump mkdocs-material to 9.8.0 (CVE-2026-73295)

2026-10-24 00:36:52 +09:00