From b3341221aa8fe53d21a691a9e000b83cf114041a Mon Sep 17 00:00:00 2001 From: Henrik Heiestad Date: Thu, 18 Jun 2026 07:04:15 +0200 Subject: [PATCH] Bump thumbor from 7.7.4 to 7.8.0 Includes security fixes for path traversal in file loader, URL signature bypass, ALLOWED_SOURCES hardening, and DoS fixes in convolution/proportion filters. Co-Authored-By: Claude Sonnet 4.6 --- thumbor/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/thumbor/requirements.txt b/thumbor/requirements.txt index e8bd9303..6adfbbe8 100644 --- a/thumbor/requirements.txt +++ b/thumbor/requirements.txt @@ -10,5 +10,5 @@ raven==6.10.0 tc-aws==7.0.2 tc-core==0.5 tc_redis==2.5.0 -thumbor[all]==7.7.4 +thumbor[all]==7.8.0 thumbor-wand-engine==0.1.1