Skip to content

Upgrade cryptography to resolve GHSA-537c-gmf6-5ccf #487

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
cigamit merged 1 commit into from
Jun 17, 2026
Merged

Upgrade cryptography to resolve GHSA-537c-gmf6-5ccf #487

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions requirements/requirements.in
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ botocore
cachetools
channels
channels-valkey
cryptography>=46.0.7 # CVE-2026-39892
cryptography>=49.0.0 # CVE-2026-39892 GHSA-537c-gmf6-5ccf
Cython>=3 # this is needed as a build dependency, one day we may have separated build deps; <3 cap removed once pyyaml>=6.0.1 supported Cython 3
daphne
distro
Expand Down Expand Up @@ -40,6 +40,7 @@ jinja2>=3.1.6 # CVE-2025-27516
JSON-log-formatter
jsonschema
Markdown>=3.8.1 # CVE-2025-69534 # used for formatting API help
msal>=1.37.0 # cryptography>=49 compatibility (msal<1.37 caps cryptography<49)
openshift
packaging==24.2
pexpect==4.7.0 # see library notes
Expand All @@ -48,7 +49,7 @@ psycopg
psutil
pygerduty
pygithub
pyopenssl>=26.0.0 # resolve dep conflict from cryptography pin above
pyopenssl>=26.3.0 # tracks cryptography pin above (pyopenssl 26.3.0 requires cryptography>=49)
pyparsing==2.4.6 # Upgrading to v3 of pyparsing introduce errors on smart host filtering: Expected 'or' term, found 'or' (at char 15), (line:1, col:16)
python-daemon>3.0.0
python-dsv-sdk>=1.0.4
Expand Down
6 changes: 3 additions & 3 deletions requirements/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -79,7 +79,7 @@ click==8.1.7
# via receptorctl
constantly==23.10.4
# via twisted
cryptography==46.0.7
cryptography==49.0.0
# via
# -r /awx_devel/requirements/requirements.in
# autobahn
Expand Down Expand Up @@ -250,7 +250,7 @@ more-itertools==10.2.0
# irc
# jaraco-functools
# jaraco-text
msal==1.34.0
msal==1.37.0
# via
# azure-identity
# msal-extensions
Expand Down Expand Up @@ -324,7 +324,7 @@ pyjwt[crypto]==2.13.0
# twilio
pynacl==1.6.2
# via pygithub
pyopenssl==26.0.0
pyopenssl==26.3.0
# via
# -r /awx_devel/requirements/requirements.in
# twisted
Expand Down