From 92919925333e4627012225d2a98db324c8c8d199 Mon Sep 17 00:00:00 2001 From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com> Date: Thu, 17 Sep 2026 23:13:11 +0000 Subject: [PATCH] fix: tested_requirements/requirements_37.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AZURECORE-14927372 - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-5805047 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-15263096 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-17344551 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-18516620 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-18516622 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315328 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3316211 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6126975 - https://snyk.io/vuln/SNYK-PYTHON-PYJWT-15518059 - https://snyk.io/vuln/SNYK-PYTHON-PYJWT-17053408 - https://snyk.io/vuln/SNYK-PYTHON-PYJWT-2840625 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192442 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192443 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-16642024 - https://snyk.io/vuln/SNYK-PYTHON-WHEEL-3180413 --- tested_requirements/requirements_37.txt | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/tested_requirements/requirements_37.txt b/tested_requirements/requirements_37.txt index e72a53379c..9fe21816f2 100644 --- a/tested_requirements/requirements_37.txt +++ b/tested_requirements/requirements_37.txt @@ -3,14 +3,14 @@ asn1crypto==1.4.0 auditwheel==3.1.1 azure-common==1.1.25 -azure-core==1.8.0 +azure-core==1.38.0 azure-storage-blob==12.4.0 boto3==1.14.47 botocore==1.17.47 -certifi==2020.4.5.1 +certifi==2023.7.22 cffi==1.14.2 chardet==3.0.4 -cryptography==2.9.2 +cryptography==49.0.0 docutils==0.15.2 idna==2.9 isodate==0.6.0 @@ -21,7 +21,7 @@ oscrypto==1.2.1 pycparser==2.20 pycryptodomex==3.9.8 pyelftools==0.26 -PyJWT==1.7.1 +PyJWT==2.13.0 pyOpenSSL==19.1.0 python-dateutil==2.8.1 pytz==2020.1 @@ -29,4 +29,5 @@ requests==2.23.0 requests-oauthlib==1.3.0 s3transfer==0.3.3 six==1.15.0 -urllib3==1.25.10 +urllib3==2.7.0 +wheel>=0.38.0 # not directly required, pinned by Snyk to avoid a vulnerability