Skip to content

Conversation

descope[bot]
Copy link
Contributor

@descope descope bot commented Jul 15, 2023

This PR contains the following updates:

Package Update Change
cryptography (changelog) patch ==41.0.1 -> ==41.0.2

GitHub Vulnerability Alerts

CVE-2023-38325

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.


Release Notes

pyca/cryptography (cryptography)

v41.0.2

Compare Source


Configuration

📅 Schedule: Branch creation - "" in timezone Asia/Jerusalem, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

@descope descope bot added the security label Jul 15, 2023
@descope descope bot enabled auto-merge (squash) July 15, 2023 02:11
@github-actions
Copy link

github-actions bot commented Jul 15, 2023

Coverage

Coverage Report
FileStmtsMissCoverMissing
__init__.py50100% 
_auth_base.py40100% 
auth.py284996%368, 370, 464–465, 476, 508, 519, 565, 609
common.py710100% 
descope_client.py108397%64, 88, 333
exceptions.py260100% 
mgmt.py450100% 
authmethod
   __init__.py00100% 
   enchantedlink.py800100% 
   magiclink.py830100% 
   oauth.py260100% 
   otp.py890100% 
   password.py580100% 
   saml.py230100% 
   totp.py440100% 
   webauthn.py990100% 
management
   access_key.py270100% 
   audit.py361169%72, 74, 76, 78, 80, 82, 84, 86, 88, 90, 92
   common.py680100% 
   flow.py190100% 
   group.py150100% 
   jwt.py90100% 
   permission.py120100% 
   role.py150100% 
   sso_settings.py450100% 
   tenant.py250100% 
   user.py1210100% 
TOTAL14372398% 

@descope descope bot merged commit f0370dd into main Jul 15, 2023
@descope descope bot deleted the renovate/pypi-cryptography-vulnerability branch July 15, 2023 02:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants