-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Bump the cryptography version to 42 #3950
Copy link
Copy link
Closed
Labels
dependenciesPull requests that update a dependency filePull requests that update a dependency file
Description
Metadata
Metadata
Assignees
Labels
dependenciesPull requests that update a dependency filePull requests that update a dependency file
Type
Fields
Give feedbackNo fields configured for issues without a type.
Is your feature request related to a problem? Please describe.
cryptography<42package has some medium vulnerabilities. Example: https://scout.docker.com/vulnerabilities/id/CVE-2023-50782?s=github&n=cryptography&t=pypi&vr=%3C42.0.0&utm_source=desktop&utm_medium=ExternalLinkstarlette and fastapi had some high vulnerabilities but that was recently bumped up and thanks to that, they are removed.
Describe the solution you'd like
Bump the cryptography package to>=42. Nice to have: bumping up of other compatible packages also.