Try to install bunq_sdk with only the newest versions of the dependencies installed. (e.g. via the operating system's package manager)
What should happen:
bunq_sdk installs and is secure.
What happens:
Could not find a version that satisfies the requirement urllib3==1.21.1, among other issues
SDK version and environment
Tested on 0.10.16 (y'all's issue template is wrong too)
Extra info:
in pycryptodome(x): CVE-2018-15560 (an AES crypto vuln) and so on have been fixed last year; but the dependencies are hard-coded to those of two years ago, meaning that any installation of the bunq python SDK is vulnerable.
Steps to reproduce:
bunq_sdk
with only the newest versions of the dependencies installed. (e.g. via the operating system's package manager)What should happen:
bunq_sdk
installs and is secure.What happens:
Could not find a version that satisfies the requirement urllib3==1.21.1
, among other issuesSDK version and environment
Extra info:
in pycryptodome(x): CVE-2018-15560 (an AES crypto vuln) and so on have been fixed last year; but the dependencies are hard-coded to those of two years ago, meaning that any installation of the bunq python SDK is vulnerable.