diff --git a/pyproject.toml b/pyproject.toml index 2e1468db60e7..3ee5116fb55f 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -50,7 +50,7 @@ dependencies = [ "flask-cors>=6.0.5, <7.0", "croniter>=6.2.4", "cron-descriptor", - "cryptography>=49.0.0, <50.0.0", + "cryptography>=50.0.0, <51.0.0", "deprecation>=2.1.0, <2.2.0", "flask>=2.2.5, <4.0.0", "flask-appbuilder>=5.2.2, <6.0.0", diff --git a/requirements/base.in b/requirements/base.in index 946592c8ed65..386889914212 100644 --- a/requirements/base.in +++ b/requirements/base.in @@ -26,7 +26,7 @@ filelock>=3.20.3,<4.0.0 brotli>=1.2.0,<2.0.0 numexpr>=2.9.0 # Security: CVE-2026-34073 (MEDIUM) - Improper Certificate Validation -cryptography>=49.0.0,<50.0.0 +cryptography>=50.0.0,<51.0.0 # Security: Snyk - XSS vulnerability in Mako templates mako>=1.3.11,<2.0.0 # Security: CVE-2024-52338 (CRITICAL) - Deserialization of untrusted data in IPC/Parquet readers diff --git a/requirements/base.txt b/requirements/base.txt index f44ed45930ac..4a97eb8b266c 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -88,7 +88,7 @@ cron-descriptor==1.4.5 # via apache-superset (pyproject.toml) croniter==6.2.4 # via apache-superset (pyproject.toml) -cryptography==49.0.0 +cryptography==50.0.0 # via # -r requirements/base.in # apache-superset (pyproject.toml) @@ -326,7 +326,7 @@ pyjwt==2.13.0 # flask-jwt-extended pynacl==1.6.2 # via paramiko -pyopenssl==26.3.0 +pyopenssl==26.4.0 # via # -r requirements/base.in # shillelagh diff --git a/requirements/development.txt b/requirements/development.txt index ec05bdcdca87..02d31047c6d5 100644 --- a/requirements/development.txt +++ b/requirements/development.txt @@ -182,7 +182,7 @@ croniter==6.2.4 # via # -c requirements/base-constraint.txt # apache-superset -cryptography==49.0.0 +cryptography==50.0.0 # via # -c requirements/base-constraint.txt # apache-superset @@ -791,7 +791,7 @@ pynacl==1.6.2 # via # -c requirements/base-constraint.txt # paramiko -pyopenssl==26.3.0 +pyopenssl==26.4.0 # via # -c requirements/base-constraint.txt # google-auth