Anthropic pdf #4

fegloff · 2025-10-06T18:58:06Z

Summary by CodeRabbit

New Features
- Added Anthropic endpoints: completions, PDF inquiry, and CV analysis.
- Introduced OpenAI audio transcription upload.
- Added Collections API for document ingestion (async), status checks, querying, and reset.
- Expanded Vertex/Gemini completions with optional streaming.
Improvements
- More robust error handling, logging, and consistent JSON responses.
- Session support and basic persistence for improved reliability.
Deployment
- New Dockerfile, Fly.io configs, app.yaml, .env.example, and pinned Python version.
Documentation
- Added Fly.io deployment instructions.
Chores
- Updated ignore rules and dependency management.

add BotHandler class + update architecture

update llmlite library + small changes

refactor collections respource and chromadb modules

feat: timer decorator

add check collection creation status logic

chromad persistence

…nfiguration

… + update chromadb version to fix folder deletion

improve collection error handling + add sqlalchemy + improve flyio co…

coderabbitai · 2025-10-06T18:59:17Z

Caution

Review failed

Failed to post review comments

Walkthrough

Adds Docker/Fly/GCloud configs, environment templates, and pins Python to 3.10.13. Introduces Flask app setup with SQLAlchemy, sessions, and centralized error handling. Adds API namespaces for Vertex/Gemini, Anthropic, OpenAI audio, and collections management with ChromaDB storage, web crawling, and PDF processing utilities. Expands dependency manifests.

Changes

Cohort / File(s)	Summary
Containerization & Deployment `Dockerfile`, `.dockerignore`, `.gcloudignore`, `.gitignore`, `.python-version`, `app.yaml`, `fly.toml`, `fly.production.toml`, `README.md`	New Docker image (Py 3.10.13), ignore rules, App Engine/Fly.io configs, and deployment docs.
Environment & Secrets Templates `.env.example`, `res/service_accoun_example.json`	Adds example env variables and a sample GCP service account JSON.
Dependencies `Pipfile`, `requirements.txt`, `requirements.txt.bkp*`	Pins/updates packages; introduces extensive AI/LLM, PDF, crawling, and server deps; adds backups; shifts Python to 3.10.13.
App Bootstrap & Config `main.py`, `config.py`, `res/__init__.py`, `res/custom_error.py`, `res/llm_exceptions.py`, `res/text_messages.py`	Flask app configuration, session/DB init, centralized CustomError handling, env/log setup, domain exceptions, and message constants.
API Registration `apis/__init__.py`	Updates API metadata and registers new namespaces (llms, collections, openai, anthropic, vertex).
LLMs Core Endpoint Adjustments `apis/llms_resource.py`, `apis/vertex_resource.py`	Refactors error handling, structured responses, streaming helpers; adds Vertex Gemini completions endpoint and initialization.
Anthropic API `apis/anthropic_resource.py`	New namespace with completions (streaming), PDF inquiry, and CV analysis endpoints; PDF extraction and helpers.
OpenAI Audio `apis/openai_resource.py`	New namespace with Whisper-based audio transcription upload endpoint.
Collections Feature (ChromaDB) `apis/collections/`, `storages/`, `services/pdf.py`, `services/web_crawling.py`, `models/*`	Endpoints to create/reset/query collections; ChromaDB storage wrapper; web crawling and PDF chunking; CollectionError model and DB setup.
Service Utilities `services/__init__.py`, `services/telegram.py`, `services/timer_decorator.py`	Re-exports; Telegram bot wrapper; execution timer decorator.

Sequence Diagram(s)

sequenceDiagram
  autonumber
  participant Client
  participant API as Flask API
  participant Coll as Collections NS
  participant Store as ChromaStorage
  participant WC as WebCrawling
  participant PDF as PdfHandler
  participant DB as SQLAlchemy(DB)

  rect rgba(230,245,255,0.5)
  Client->>Coll: POST /collections/document {chatId,url,fileName}
  Coll->>Coll: spawn background handler
  Coll-->>Client: 202 {collectionName}
  end

  alt URL is PDF
    Coll->>PDF: pdf_to_chunks(url)
    PDF-->>Coll: chunks
  else URL is HTML
    Coll->>WC: get_web_content(url)
    WC-->>Coll: urlText chunks
  end
  Coll->>Store: store_text_array(..., collectionName)
  Store-->>Coll: index created
  Coll->>DB: (on error) save CollectionError
  DB-->>Coll: ack

  Client->>Coll: GET /collections/document/{collectionName}
  alt exists
    Coll-->>Client: 200 {status:DONE, price, tokens}
  else processing
    Coll-->>Client: 200 {status:PROCESSING}
  else error
    Coll-->>Client: 200 {status:DONE,error:INVALID_COLLECTION}
  end

  Client->>Coll: POST /collections/query {collectionName,prompt,conversation}
  Coll->>Store: get_vector_index(collectionName)
  Store-->>Coll: vector index
  Coll-->>Client: 200 {message, tokens, price}

sequenceDiagram
  autonumber
  participant Client
  participant Anth as Anthropic NS
  participant AC as Anthropic Client

  Client->>Anth: POST /anthropic/completions {messages,stream}
  alt stream=true
    Anth->>AC: messages.create(stream=True)
    AC-->>Anth: event stream
    Anth-->>Client: SSE data chunks
  else
    Anth->>AC: messages.create(stream=False)
    AC-->>Anth: response
    Anth-->>Client: 200 JSON
  end
  Anth-->>Client: (on error) CustomError -> JSON handler

sequenceDiagram
  autonumber
  participant Client
  participant Vertex as Vertex NS
  participant GAI as Vertex/Gemini SDK

  Client->>Vertex: POST /vertex/completions[/gemini] {input,stream}
  Vertex->>GAI: init + generate (stream or not)
  alt stream
    GAI-->>Vertex: token stream
    Vertex-->>Client: SSE chunks
  else
    GAI-->>Vertex: full response
    Vertex-->>Client: 200 JSON
  end
  Vertex-->>Client: errors via CustomError

sequenceDiagram
  autonumber
  participant Client
  participant OAI as OpenAI NS
  participant FS as File System
  participant Whisper as OpenAI Whisper

  Client->>OAI: POST /openai/upload-audio (multipart)
  OAI->>FS: save file
  OAI->>Whisper: transcribe(path)
  Whisper-->>OAI: text
  OAI->>FS: delete file
  OAI-->>Client: 200 {transcription}
  OAI-->>Client: 500 CustomError on failures

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~75 minutes

Poem

In docker dens I thump with glee,
New routes hop out: Anthro, Gemini, and Whisper’s key.
I nibble docs, I crawl the web,
Chunking PDFs for a comfy bed.
Collections bloom in Chroma’s glade—
A happy hare, with APIs made. 🐇✨

Pre-merge checks and finishing touches and finishing touches

❌ Failed checks (1 warning, 1 inconclusive)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 16.90% which is insufficient. The required threshold is 80.00%.	You can run `@coderabbitai generate docstrings` to improve docstring coverage.
Title Check	❓ Inconclusive	The title “Anthropic pdf” is overly brief and uses generic terminology that does not clearly convey the primary changes in the pull request. While the diff includes PDF-related functionality for the Anthropic API, the title fails to specify the addition of new endpoints, configuration updates, and supporting code. A more descriptive title would help teammates quickly grasp the core purpose of the changes.	Please revise the title to a concise, informative phrase such as “Add Anthropic PDF summarization and analysis endpoints” to accurately reflect the main improvements introduced in this pull request.

✅ Passed checks (1 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

✨ Finishing touches

📝 Generate docstrings

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch anthropic-pdf

✨ Finishing touches

📝 Generate docstrings

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch anthropic-pdf

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

coderabbitai

Actionable comments posted: 38

🧹 Nitpick comments (10)

.gitignore (1)
1-14: LGTM! Consider adding additional common patterns.

The ignore rules appropriately exclude runtime data directories, environment files, and build artifacts. However, consider adding these common patterns for completeness:
+# Additional Python patterns
+*.pyc
+*.pyo
+*.egg-info/
+dist/
+build/
+.pytest_cache/
+.coverage
+htmlcov/
+
+# Additional virtual environment patterns
+.venv/
+env/
+ENV/
.dockerignore (1)
1-5: Expand .dockerignore to reduce build context size and improve security.

The current patterns are a good start, but the Docker build context could be significantly reduced by adding more exclusions. This improves build speed and prevents accidentally copying sensitive or unnecessary files into the image.
 **/.DS_Store
 .vscode/
 __pycache__/
 chroma/
 .env
+
+# Git and version control
+.git/
+.gitignore
+.gitattributes
+
+# Environment files
+.env.*
+*.env
+
+# Documentation
+*.md
+docs/
+
+# Tests
+tests/
+test_*.py
+*_test.py
+.pytest_cache/
+.coverage
+htmlcov/
+
+# CI/CD
+.github/
+.gitlab-ci.yml
+
+# Build artifacts
+*.pyc
+*.pyo
+*.egg-info/
+dist/
+build/
+
+# Data directories
+data/
+uploads/
+*.db
+*.sqlite
+
+# Virtual environments
+venv/
+.venv/
+env/
+
+# IDE
+.idea/
+*.swp
+*.swo
+
+# Backup files
+*.bkp
+*.bak
+requirements.txt.bkp*
requirements.txt.bkp2 (2)
80-80: Consider migration to openai 1.x for improved typing and API stability.

openai==0.28.1 uses the legacy global-function API. The 1.x client offers:

Improved typing

Explicit client instantiation

Better retry/backoff behavior

More maintainable code

Note that upgrading from 0.28.1 to 1.x is a breaking change requiring code updates across all OpenAI API calls.

Based on learnings.

127-127: Update werkzeug to the latest 3.0.x patch release.

werkzeug==3.0.1 should be updated to 3.0.2, which includes fixes for routing behavior, type handling, and multipart parser improvements.

Based on learnings.
-werkzeug==3.0.1; python_version >= '3.8'
+werkzeug==3.0.2; python_version >= '3.8'
.env.example (1)

8-8: Add trailing newline for POSIX compliance.

Consider adding a blank line at the end of the file to follow POSIX text file conventions.

</review_comment_end -->
services/timer_decorator.py (1)
8-8: Prefer logging over print for production code.

Using print() for timing information bypasses the application's logging configuration and cannot be easily controlled, filtered, or redirected. Consider using the logging module instead.

Apply this diff:
 import time
+import logging
+
+logger = logging.getLogger(__name__)
 
 def timer(func):
     def wrapper(*args, **kwargs):
         start = time.time()
         result = func(*args, **kwargs)
         end = time.time()
-        print(f"{func.__name__} took {end - start:.6f} seconds")
+        logger.info(f"{func.__name__} took {end - start:.6f} seconds")
         return result
     return wrapper
</review_comment_end -->
res/custom_error.py (1)
1-6: Consider adding docstring and type hints for better API documentation.

The CustomError class would benefit from:

A docstring explaining its purpose and usage

Type hints for the constructor parameters (error_code could be int, message should be str)

Apply this diff to add documentation and type hints:
 class CustomError(Exception):
+    """Custom exception for API error handling with error codes.
+    
+    Attributes:
+        error_code: Numeric error code for categorizing errors
+        message: Human-readable error description
+    """
-    def __init__(self, error_code, message):
+    def __init__(self, error_code: int, message: str) -> None:
         self.error_code = error_code
         self.message = message
         super().__init__(f"Error with code {error_code}: {message}")
Dockerfile (1)

6-6: Remove or document commented-out configuration lines.

Lines 6 and 33 contain commented-out code:

GOOGLE_APPLICATION_CREDENTIALS environment variable

Alternative Flask run command

If these are temporary, consider removing them. If they serve as configuration examples, move them to documentation or add explanatory comments.

Also applies to: 33-33
res/llm_exceptions.py (1)
1-15: Simplify exception definitions - custom init is redundant.

All four exception classes define identical __init__ methods that simply forward arguments to Exception.__init__. This is unnecessary because Python's default exception handling already does this. The classes can be simplified to just the class declaration, or given meaningful init signatures if they need specific attributes.

Apply this diff to simplify and add documentation:
+"""Domain-specific exceptions for LLM operations."""
+
 class PdfFileInvalidFormat(Exception):
-    def __init__(self,*args,**kwargs):
-        Exception.__init__(self,*args,**kwargs)
+    """Raised when a PDF file has an invalid or unsupported format."""
+    pass
 
 class InvalidCollectionName(Exception):
-    def __init__(self,*args,**kwargs):
-        Exception.__init__(self,*args,**kwargs)
+    """Raised when a collection name is invalid or malformed."""
+    pass
 
 class InvalidCollection(Exception):
-    def __init__(self,*args,**kwargs):
-        Exception.__init__(self,*args,**kwargs)
+    """Raised when referencing a non-existent or invalid collection."""
+    pass
 
 class DatabaseError(Exception):
-    def __init__(self,*args,**kwargs):
-        Exception.__init__(self,*args,**kwargs)
+    """Raised when a database operation fails."""
+    pass
Alternatively, if you need to store specific attributes, define meaningful constructors:
class DatabaseError(Exception):
    """Raised when a database operation fails."""
    def __init__(self, operation: str, original_error: Exception):
        self.operation = operation
        self.original_error = original_error
        super().__init__(f"Database error during {operation}: {original_error}")
services/telegram.py (1)
3-15: Consider adding docstrings and error handling.

The BotHandler class would benefit from:

Class and method docstrings explaining parameters and behavior

Error handling for bot API failures (network errors, invalid tokens, etc.)

Type hints for better IDE support

Example enhancement:
 class BotHandler:
+    """Wrapper for Telegram bot operations using telebot.
+    
+    Args:
+        token: Telegram bot API token
+    """
     
-    def __init__(self, token):
+    def __init__(self, token: str) -> None:
         self.bot = telebot.TeleBot(token)
 
-    def edit_message(self, msg, chat_id, message_id):
+    def edit_message(self, msg: str, chat_id: int, message_id: int) -> None:
+        """Edit an existing message.
+        
+        Args:
+            msg: New message text
+            chat_id: Target chat ID
+            message_id: Message ID to edit
+        """
         self.bot.edit_message_text(text=msg, chat_id=chat_id, message_id=message_id)
     
-    def send_message(self, msg, chat_id):
+    def send_message(self, msg: str, chat_id: int) -> None:
+        """Send a new message.
+        
+        Args:
+            msg: Message text
+            chat_id: Target chat ID
+        """
         self.bot.send_message(chat_id=chat_id, text=msg)

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 5b10355 and 02a7f15.

⛔ Files ignored due to path filters (3)

.DS_Store is excluded by !**/.DS_Store
Pipfile.lock is excluded by !**/*.lock
res/.DS_Store is excluded by !**/.DS_Store

📒 Files selected for processing (38)

.dockerignore (1 hunks)
.env.example (1 hunks)
.gcloudignore (1 hunks)
.gitignore (1 hunks)
.python-version (1 hunks)
Dockerfile (1 hunks)
Pipfile (1 hunks)
README.md (1 hunks)
apis/__init__.py (1 hunks)
apis/anthropic_resource.py (1 hunks)
apis/collections/__init__.py (1 hunks)
apis/collections/collections_helper.py (1 hunks)
apis/collections/collections_resource.py (1 hunks)
apis/llms_resource.py (2 hunks)
apis/openai_resource.py (1 hunks)
apis/vertex_resource.py (3 hunks)
app.yaml (1 hunks)
config.py (1 hunks)
fly.production.toml (1 hunks)
fly.toml (1 hunks)
main.py (1 hunks)
models/__init__.py (1 hunks)
models/collection_error_model.py (1 hunks)
requirements.txt (1 hunks)
requirements.txt.bkp (1 hunks)
requirements.txt.bkp2 (1 hunks)
res/__init__.py (1 hunks)
res/custom_error.py (1 hunks)
res/llm_exceptions.py (1 hunks)
res/service_accoun_example.json (1 hunks)
res/text_messages.py (1 hunks)
services/__init__.py (1 hunks)
services/pdf.py (1 hunks)
services/telegram.py (1 hunks)
services/timer_decorator.py (1 hunks)
services/web_crawling.py (1 hunks)
storages/__init__.py (1 hunks)
storages/chromadb_storage.py (1 hunks)

🧰 Additional context used

🧬 Code graph analysis (15)

models/__init__.py (1)

models/collection_error_model.py (1)

CollectionError (9-30)

apis/collections/__init__.py (1)

apis/collections/collections_helper.py (1)

CollectionHelper (7-55)

services/__init__.py (4)

services/telegram.py (1)

BotHandler (3-15)

services/web_crawling.py (1)

WebCrawling (5-61)

services/pdf.py (1)

PdfHandler (7-47)

services/timer_decorator.py (1)

timer (3-10)

res/__init__.py (3)

res/text_messages.py (1)

EngMsg (1-22)

res/llm_exceptions.py (4)

InvalidCollectionName (5-7)

PdfFileInvalidFormat (1-3)

DatabaseError (13-15)

InvalidCollection (9-11)

res/custom_error.py (1)

CustomError (1-5)

storages/__init__.py (1)

storages/chromadb_storage.py (1)

ChromaStorage (10-84)

apis/llms_resource.py (4)

res/text_messages.py (1)

EngMsg (1-22)

res/custom_error.py (1)

CustomError (1-5)

apis/vertex_resource.py (3)

post (59-103)

post (109-153)

data_generator (47-54)

apis/openai_resource.py (1)

post (31-66)

apis/openai_resource.py (2)

res/text_messages.py (1)

EngMsg (1-22)

res/custom_error.py (1)

CustomError (1-5)

apis/collections/collections_resource.py (6)

res/text_messages.py (1)

EngMsg (1-22)

apis/collections/collections_helper.py (6)

CollectionHelper (7-55)

reset_database (46-47)

get_collection_name (15-16)

is_pdf_url (18-19)

get_collection (21-23)

collection_query (25-35)

services/web_crawling.py (2)

WebCrawling (5-61)

get_web_content (10-33)

services/pdf.py (2)

PdfHandler (7-47)

pdf_to_chunks (12-15)

models/collection_error_model.py (2)

CollectionError (9-30)

save (19-27)

storages/chromadb_storage.py (5)

reset_database (83-84)

get_collection_name (28-35)

store_text_array_from_url (49-57)

store_text_array (60-68)

get_collection (45-47)

apis/anthropic_resource.py (3)

res/text_messages.py (1)

EngMsg (1-22)

res/custom_error.py (1)

CustomError (1-5)

services/pdf.py (2)

PdfHandler (7-47)

get_pdf_from_url (18-25)

services/pdf.py (1)

services/timer_decorator.py (1)

timer (3-10)

apis/vertex_resource.py (4)

res/text_messages.py (1)

EngMsg (1-22)

res/custom_error.py (1)

CustomError (1-5)

apis/collections/collections_resource.py (5)

data_generator (18-20)

post (26-41)

post (45-67)

post (157-188)

get (94-132)

apis/llms_resource.py (2)

data_generator (11-13)

post (18-43)

apis/collections/collections_helper.py (2)

storages/chromadb_storage.py (6)

get_collection_name (28-35)

get_collection (45-47)

get_vector_index (71-78)

delete_collection (80-81)

get_existing_collection (38-43)

reset_database (83-84)

res/llm_exceptions.py (1)

InvalidCollectionName (5-7)

storages/chromadb_storage.py (2)

apis/collections/collections_helper.py (4)

get_collection_name (15-16)

get_collection (21-23)

delete_collection (37-44)

reset_database (46-47)

apis/collections/collections_resource.py (1)

get (94-132)

main.py (1)

res/custom_error.py (1)

CustomError (1-5)

models/collection_error_model.py (1)

res/llm_exceptions.py (1)

DatabaseError (13-15)

🪛 ast-grep (0.39.5)

main.py

[warning] 63-63: Detected Flask app with debug=True. Do not deploy to production with this flag enabled as it will leak sensitive information. Instead, consider using Flask configuration variables or setting 'debug' using system environment variables.
Context: app.run(debug=True)
Note: [CWE-489] Active Debug Code. [REFERENCES]
- https://labs.detectify.com/2015/10/02/how-patreon-got-hacked-publicly-exposed-werkzeug-debugger/

(debug-enabled-python)

🪛 Checkov (3.2.334)

res/service_accoun_example.json

[medium] 5-6: Private Key

(CKV_SECRET_13)

🪛 dotenv-linter (3.3.0)

.env.example

[warning] 1-1: [QuoteCharacter] The value has quote characters (', ")

(QuoteCharacter)

[warning] 2-2: [QuoteCharacter] The value has quote characters (', ")

(QuoteCharacter)

[warning] 2-2: [UnorderedKey] The AI21_API_KEY key should go before the OPENAI_API_KEY key

(UnorderedKey)

[warning] 3-3: [UnorderedKey] The DEBUG key should go before the OPENAI_API_KEY key

(UnorderedKey)

[warning] 5-5: [QuoteCharacter] The value has quote characters (', ")

(QuoteCharacter)

[warning] 5-5: [UnorderedKey] The CHROMA_SERVER_HOST key should go before the DEBUG key

(UnorderedKey)

[warning] 6-6: [QuoteCharacter] The value has quote characters (', ")

(QuoteCharacter)

[warning] 6-6: [UnorderedKey] The CHROMA_SERVER_HTTP_PORT key should go before the DEBUG key

(UnorderedKey)

[warning] 7-7: [QuoteCharacter] The value has quote characters (', ")

(QuoteCharacter)

[warning] 8-8: [EndingBlankLine] No blank line at the end of the file

(EndingBlankLine)

[warning] 8-8: [QuoteCharacter] The value has quote characters (', ")

(QuoteCharacter)

[warning] 8-8: [UnorderedKey] The CHROMA_SERVER_PATH key should go before the DEBUG key

(UnorderedKey)

🪛 OSV Scanner (2.2.3)

requirements.txt

[HIGH] 63-63: jinja2 3.1.3: Jinja2 vulnerable to sandbox breakout through attr filter selecting format method

(GHSA-cpwx-vrp4-4pq7)

[HIGH] 63-63: jinja2 3.1.3: Jinja has a sandbox breakout through malicious filenames

(GHSA-gmj6-6f8f-6699)

[HIGH] 63-63: jinja2 3.1.3: Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

(GHSA-h75v-3vvj-5mfj)

[HIGH] 63-63: jinja2 3.1.3: Jinja has a sandbox breakout through indirect reference to format method

(GHSA-q2x7-8rv6-6q7h)

[HIGH] 140-140: werkzeug 3.0.2: Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

(GHSA-2g68-c3qc-8985)

[HIGH] 140-140: werkzeug 3.0.2: Werkzeug safe_join not safe on Windows

(GHSA-f9vj-2wh5-fj8j)

[HIGH] 140-140: werkzeug 3.0.2: Werkzeug possible resource exhaustion when parsing file data in forms

(GHSA-q34m-jh98-gwm2)

[HIGH] 20-20: aiohttp 3.9.3: aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests

(GHSA-5m98-qgg9-wh84)

[HIGH] 20-20: aiohttp 3.9.3: aiohttp Cross-site Scripting vulnerability on index pages for static file handling

(GHSA-7gpw-8wmc-pm8g)

[HIGH] 20-20: aiohttp 3.9.3: aiohttp allows request smuggling due to incorrect parsing of chunk extensions

(GHSA-8495-4g3g-x7pr)

[HIGH] 20-20: aiohttp 3.9.3: AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections

(GHSA-9548-qrrj-x5pj)

[HIGH] 15-15: certifi 2024.2.2: undefined

(PYSEC-2024-230)

[HIGH] 15-15: certifi 2024.2.2: Certifi removes GLOBALTRUST root certificate

(GHSA-248v-346w-9cwc)

[HIGH] 52-52: gunicorn 21.2.0: Gunicorn HTTP Request/Response Smuggling vulnerability

(GHSA-hc5x-x2vx-497g)

[HIGH] 52-52: gunicorn 21.2.0: Request smuggling leading to endpoint restriction bypass in Gunicorn

(GHSA-w3h3-4rj7-4ph4)

[CRITICAL] 53-53: h11 0.14.0: h11 accepts some malformed Chunked-Encoding bodies

(GHSA-vqfr-h8mv-ghfj)

[HIGH] 59-59: idna 3.6: undefined

(PYSEC-2024-60)

[HIGH] 59-59: idna 3.6: Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode

(GHSA-jjg7-2v4v-x38h)