Skip to content

Commit

Permalink
bump cryptography requirement as there are known vulnerabilities in c…
Browse files Browse the repository at this point in the history
…ryptography <43.0.1

Cryptography <43 uses a version of `openssl` that is vulnerable to http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-6119 .
In version 43.0.1 they have updated to use of `OpenSSL >= 3.3.2`, fixing the issue
  • Loading branch information
astrajeriu authored Nov 8, 2024
1 parent 761892b commit c437ef7
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion setup.py
Original file line number Diff line number Diff line change
Expand Up @@ -99,7 +99,7 @@ def get_include_files() -> List[Tuple[str, str]]:
# Dependencies
install_requires=[
"nassl>=5.1,<6",
"cryptography>42,<43",
"cryptography>43,<44",
"tls-parser>=2,<3",
"pydantic>=2.2,<2.7",
],
Expand Down

0 comments on commit c437ef7

Please sign in to comment.