Update requirements.txt

SecurityInnovation / PGPy

Pretty Good Privacy for Python

BSD 3-Clause "New" or "Revised" License

317 stars 99 forks source link

Update requirements.txt #384

Closed rkarthickram closed 2 years ago

rkarthickram commented 2 years ago

Cryptography 2.6 has vulnerability issues, so upgrading the verision to v3.3

cryptography (v2.6) CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-190: Integer Overflow or Wraparound CWE-787: Out-of-bounds Write CWE-20: Improper Input Validation

J-M0 commented 2 years ago

Thanks for the PR @rkarthickram! Could you also update this in setup.cfg and tox.ini please? Once that is done I'll approve the tests.