Skip to content

Commit e03f144

Browse files
committed
package: overriding protobuf from mem0 pin
1 parent b72d597 commit e03f144

2 files changed

Lines changed: 15 additions & 8 deletions

File tree

Main/backend/pyproject.toml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,9 @@ docs = [
5959

6060
[tool.uv]
6161
package = false
62+
override-dependencies = [
63+
"protobuf>=6.33.5", # CVE-2026-0994: JSON recursion depth bypass (overrides mem0ai's <6 pin)
64+
]
6265

6366
[build-system]
6467
requires = ["hatchling"]

Main/backend/uv.lock

Lines changed: 12 additions & 8 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)