From 8dd486bbeeac0c717bfe6f9d572888a64d9ffa4f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 5 Aug 2026 17:33:00 +0000 Subject: [PATCH 1/2] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-18516620 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-18516622 --- requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements.txt b/requirements.txt index 485e4eb4a3..307be6009f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -93,3 +93,4 @@ xml2rfc>=3.30.0 xym>=0.6,<0.10.0 zxcvbn>=4.5.0 types-zxcvbn~=4.5.0.20260518 # match zxcvbn version +cryptography>=49.0.0 # not directly required, pinned by Snyk to avoid a vulnerability From bb045c330d8423a932d1a48b67f77ee77f46d144 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 5 Aug 2026 17:33:16 +0000 Subject: [PATCH 2/2] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-18516620 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-18516622