CVE patches

CVE-2026-32597 CVE-2026-30922 CVE-2026-22184

Author: Avi-Robusta

enforcer/Dockerfile

@@ -7,7 +7,8 @@ ENV PATH="/app/venv/bin:$PATH"
 # Patching CVE-2025-6965 (requires sqlite >= 3.50.2)
 # Alpine's current version (3.51.1-r0) already includes the fix
 RUN apk update && apk add --no-cache --upgrade \
-    sqlite-libs sqlite
+    sqlite-libs sqlite \
+    zlib
 
 # Set the working directory
 WORKDIR /app/enforcer

enforcer/requirements.txt

@@ -6,5 +6,6 @@ PyYAML==6.0.1
 cachetools==5.3.3
 prometheus-client==0.20.0
 kubernetes==26.1.0
-pyasn1>=0.6.2
+pyasn1>=0.6.3
+PyJWT>=2.12.1
 urllib3==2.6.3

poetry.lock

@@ -28,7 +28,7 @@ pillow==12.1.1 ; python_version >= "3.10" and python_full_version < "3.13"
 prometheus-api-client==0.5.3 ; python_version >= "3.10" and python_full_version < "3.13"
 prometrix==0.2.11; python_version >= "3.10" and python_full_version < "3.13"
 pyasn1-modules==0.4.2 ; python_version >= "3.10" and python_full_version < "3.13"
-pyasn1==0.6.2 ; python_version >= "3.10" and python_full_version < "3.13"
+pyasn1==0.6.3 ; python_version >= "3.10" and python_full_version < "3.13"
 pydantic==1.10.15 ; python_version >= "3.10" and python_full_version < "3.13"
 pygments==2.17.2 ; python_version >= "3.10" and python_full_version < "3.13"
 pyparsing==3.1.2 ; python_version >= "3.10" and python_full_version < "3.13"