wx44wx/pipecat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #4035 from pipecat-ai/mb/bump-pyjwt-version

Browse Source
This commit is contained in:
Mark Backman
2026-03-16 21:06:31 -04:00
committed by GitHub
parent fa5b757408 e8415b7451
commit 154a8d1987
3 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
changelog/4035.security.md Normal file
View File

@@ -0,0 +1 @@
- Bumped PyJWT minimum version from 2.10.1 to 2.12.0 in the `livekit` extra to address CVE-2026-32597 (GHSA-752w-5fwx-jx9f), where PyJWT <= 2.11.0 accepted unknown `crit` header extensions.