Skip to content

update cryptography dependency version >=46.0.0 #1194

@mspierenburg

Description

@mspierenburg

Is your feature request related to a problem? Please describe.

pyopenssl had a vulnerability which is fixed in version 26.0.0.
see: https://pypi.org/project/pyOpenSSL/26.0.0/

But pyopenssl has dependency "cryptography>=46.0.0,<47"
And ggshield has dependency "cryptography~=43.0.1",

So if both dependencies are in your project it is currently not possible to update pyopenssl to a safe version without having a conflict on the cryptography package version.

Describe the solution you'd like

Update "cryptography~=43.0.1", dependency to at least 46.0.0
Make sure all test are still working.

Describe alternatives you've considered

Remove cryptography dependency if possible

Additional context

Metadata

Metadata

Assignees

No one assigned

    Labels

    status:newThis issue needs to be reviewedtype:featureFeature request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions