-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Closed
Labels
dependenciesPull requests that update a dependency filePull requests that update a dependency file
Description
Is your feature request related to a problem? Please describe.
cryptography<42 package has some medium vulnerabilities. Example: https://scout.docker.com/vulnerabilities/id/CVE-2023-50782?s=github&n=cryptography&t=pypi&vr=%3C42.0.0&utm_source=desktop&utm_medium=ExternalLink
starlette and fastapi had some high vulnerabilities but that was recently bumped up and thanks to that, they are removed.
Describe the solution you'd like
Bump the cryptography package to>=42. Nice to have: bumping up of other compatible packages also.
Metadata
Metadata
Assignees
Labels
dependenciesPull requests that update a dependency filePull requests that update a dependency file