Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade dependencies (Flask) #1958

Open
LewisCowlesMotive opened this issue Aug 5, 2024 · 0 comments
Open

Upgrade dependencies (Flask) #1958

LewisCowlesMotive opened this issue Aug 5, 2024 · 0 comments

Comments

@LewisCowlesMotive
Copy link

Description

I got a dependency error that Jinja2 has a CVE from 2019. While I don't use it, a better fix might be to get the latest Jinja and Flask

Expected behaviour

Feels a bit much, but no CVE's 😄

Actual behaviour

CVE's when running poetry audit

Steps to reproduce

  1. setup python
  2. install package management solution (I use poetry)
  3. Add the poetry audit plugin poetry self add poetry-audit-plugin==0.3.0
  4. Run the poetry audit plugin poetry audit

Additional info:

Output of the commands:

  • python --version 3.11.9
  • pip show connexion | grep "^Version\:" 3.1.0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant