chore(dependencies): Update `cryptography` and pin `urllib3` - Githubissues

auth0 / auth0-python

Auth0 SDK for Python

https://auth0-python.readthedocs.io

MIT License

506 stars 164 forks source link

chore(dependencies): Update `cryptography` and pin `urllib3` #548

Closed evansims closed 10 months ago

evansims commented 10 months ago

Changes

This PR:

Bumps the cryptography dependency version to ^41.0.5 (up from ^41.0.3) to address CVE-2023-45803.
Pins the weak dependency for urllib3 (by way of requests) to ^2.0.7 to address CVE-2023-5363.

References

N/A

Testing

N/A

Checklist

[x] I have read the Auth0 general contribution guidelines
[x] I have read the Auth0 Code of Conduct
[x] All existing and new tests complete without errors