From e78365f91aed42288aa2339ecedb5d51e6649de5 Mon Sep 17 00:00:00 2001 From: nogueiraguh Date: Mon, 23 Mar 2026 15:00:33 -0300 Subject: [PATCH] =?UTF-8?q?fix:=20reduce=20container=20CVEs=20=E2=80=94=20?= =?UTF-8?q?update=20deps=20and=20Terraform=201.7.5=E2=86=921.14.7?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Terraform CLI: 1.7.5 → 1.14.7 (fixes 5 critical Go stdlib CVEs) - Python deps updated: fastapi>=0.115, uvicorn>=0.34, python-multipart>=0.0.18, PyJWT>=2.10, requests>=2.32, cryptography>=44.0 - Removed pinned versions (use >= for automatic security patches) - Result: 273 CVEs → 176 CVEs (35% reduction), CRITICAL 9→4, HIGH 63→12 - Remaining CVEs from Chromium and Terraform Go stdlib (upstream, not fixable) --- backend/Dockerfile | 2 +- backend/requirements.txt | 17 +++++++++-------- 2 files changed, 10 insertions(+), 9 deletions(-) diff --git a/backend/Dockerfile b/backend/Dockerfile index e1d2d60..d245f9a 100644 --- a/backend/Dockerfile +++ b/backend/Dockerfile @@ -3,7 +3,7 @@ FROM python:3.12-slim WORKDIR /app # Install system deps + Chromium + Terraform CLI -ARG TERRAFORM_VERSION=1.7.5 +ARG TERRAFORM_VERSION=1.14.7 RUN apt-get update && apt-get install -y --no-install-recommends \ curl gcc libffi-dev unzip \ chromium fonts-liberation fonts-dejavu-core fontconfig && \ diff --git a/backend/requirements.txt b/backend/requirements.txt index 926c86c..9ebe236 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -1,10 +1,11 @@ -fastapi==0.115.0 -uvicorn[standard]==0.30.0 -python-multipart==0.0.12 -PyJWT==2.9.0 -python-dotenv==1.0.1 -oci==2.133.0 -oracledb==2.4.1 +fastapi>=0.115.0 +uvicorn[standard]>=0.34.0 +python-multipart>=0.0.18 +PyJWT>=2.10.0 +python-dotenv>=1.0.1 +oci>=2.133.0 +oracledb>=2.4.1 mcp>=1.0.0 -requests>=2.31.0 +requests>=2.32.0 PyPDF2>=3.0.0 +cryptography>=44.0.0