Description:
pycryptodome is not used as a direct dependency as part of requirements.txt.
pipenv install generates this as part of Pipfile.
Rerunning pipenv install regenerates pycryptodome with upgraded version of pycryptodome that is compliant with security requirement.
Tested cse server commands with encrypt, decrypt and template
Fix security alert on using lower version of pycryptodome
Upgrade pycryptodome to version 3.19.1 or later
Ref: https://github.com/vmware/container-service-extension/security/dependabot/17
Description:
pycryptodome
is not used as a direct dependency as part ofrequirements.txt
.pipenv install
generates this as part of Pipfile.Rerunning
pipenv install
regeneratespycryptodome
with upgraded version ofpycryptodome
that is compliant with security requirement.Tested cse server commands with encrypt, decrypt and template
@rocknes @Anirudh9794
This change is