Fix/dependabot cves#8

Merged

koljahuang merged 6 commits into

mainfrom

fix/dependabot-cves

Apr 3, 2026

Commits on Apr 1, 2026

Merge pull request #2 from koljahuang/feat/increase-timeouts
koljahuang
authored

Commits on Apr 3, 2026

fix: override lodash to >=4.18.0 to resolve Prototype Pollution CVE
Chao Huang
committed
fix: replace python-jose with PyJWT to eliminate ecdsa timing attack CVE
Chao Huang
committed
fix: treat 0 as unlimited for uvicorn limit_max_requests and limit_concurrency
Chao Huang
committed
Revert "fix: treat 0 as unlimited for uvicorn limit_max_requests and limit_concurrency"
Chao Huang
committed
Merge remote-tracking branch 'aws-samples/main' into fix/dependabot-cves
Chao Huang
committed