Skip to content

Commit 736a79f

Browse files
authored
Hotfix/fix pyjwt vulnerability (#23)
* Switched to PyWJT 2.4.0. CVE-2022-29217 As specified in https://nvd.nist.gov/vuln/detail/CVE-2022-29217 PyJWT has a vulnerability fixed with version 2.4.0. * Updated for revision 1.3.1
1 parent f420b8a commit 736a79f

File tree

2 files changed

+8
-2
lines changed

2 files changed

+8
-2
lines changed

CHANGELOG.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,11 @@
11
# Changelog
22

3+
## Version 1.3.1
4+
5+
### Changed
6+
7+
* Switched to version 2.4.0 of PyJWT as recommended by https://nvd.nist.gov/vuln/detail/CVE-2022-29217
8+
39
## Version 1.3
410

511
### Changed

requirements.txt

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ python-dotenv~=0.19.0
88
setuptools_scm~=6.2
99
invoke~=1.6.0
1010
pylint~=2.11.1
11-
PyJWT~=2.3.0
11+
PyJWT~=2.4.0
1212
cachetools~=5.0.0
1313
inputimeout~=1.0.4
14-
flask~=2.0.2
14+
flask~=2.0.2

0 commit comments

Comments
 (0)