stable-diffusion-webui icon indicating copy to clipboard operation
stable-diffusion-webui copied to clipboard

Published 20 hours ago • verified publisher icon AUTOMATIC1111

[Bug]: Security issue : please update fastapi to Release version 0.92.0

Open Ehplodor opened this issue 2 years ago • 2 comments

Is there an existing issue for this?

  • [X] I have searched the existing issues and checked the recent builds/commits

What happened?

FastApi Release version 0.92.0 is a security fix. Please update requirements ASAP. Thanks

Steps to reproduce the problem

please update fastapi requirement version

What should have happened?

Latest Changes

🚨 This is a security fix. Please upgrade as soon as possible.

Upgrades

  • ⬆️ Upgrade Starlette to 0.25.0. PR #5996 by @tiangolo.
    • This solves a vulnerability that could allow denial of service attacks by using many small multipart fields/files (parts), consuming high CPU and memory.
    • Only applications using forms (e.g. file uploads) could be affected.
    • For most cases, upgrading won't have any breaking changes.

Commit where the problem happens

3715ece0adce7bf7c5e9c5ab3710b2fdc3848f39

What platforms do you use to access the UI ?

No response

What browsers do you use to access the UI ?

No response

Command Line Arguments

not relevant

List of extensions

not relevant

Console logs

not relevant

Additional information

https://github.com/tiangolo/fastapi/commit/6879082b3668edd213d035b6e9a90a4bccf32e01

Ehplodor avatar Feb 16 '23 17:02 Ehplodor

@Ehplodor ty, its better to make a PR updating requirements.txt to the new version. this issue https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/7714 appears to have been fixed using 0.92.0

ClashSAN avatar Feb 16 '23 19:02 ClashSAN

fastapi higher than 0.90.1 has major issues with gradioapp and until that is resolved, i don't think it can be upgraded.

vladmandic avatar Feb 19 '23 00:02 vladmandic

0.94.0 is in use. Closing.

hithereai avatar Mar 27 '23 19:03 hithereai