Skip to content

[Snyk] Security upgrade cryptography from 45.0.7 to 46.0.5#119

Open
mobby57 wants to merge 1 commit intomainfrom
snyk-fix-39de6d31689fc88ce0f4f74b1692480a
Open

[Snyk] Security upgrade cryptography from 45.0.7 to 46.0.5#119
mobby57 wants to merge 1 commit intomainfrom
snyk-fix-39de6d31689fc88ce0f4f74b1692480a

Conversation

@mobby57
Copy link
Owner

@mobby57 mobby57 commented Feb 15, 2026

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the pip dependencies of this project.

Snyk changed the following file(s):

  • requirements-python.txt
⚠️ Warning
otebook 6.5.7 requires pyzmq, which is not installed.
jupyter-server 1.24.0 requires pyzmq, which is not installed.
jupyter-console 6.6.3 requires pyzmq, which is not installed.
jupyter-client 7.4.9 requires pyzmq, which is not installed.
ipykernel 6.16.2 requires pyzmq, which is not installed.

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-15263096
Copilot AI review requested due to automatic review settings February 15, 2026 15:49
@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Feb 15, 2026

Deploying memolib with  Cloudflare Pages  Cloudflare Pages

Latest commit: 6baafc7
Status:🚫  Build failed.

View logs

@vercel
Copy link

vercel bot commented Feb 15, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
iapostemanager-mfq1 Error Error Feb 15, 2026 4:00pm
memo-lib Error Error Feb 15, 2026 4:00pm
memo-lib-nak6 Error Error Feb 15, 2026 4:00pm
memo-lib-t22u Error Error Feb 15, 2026 4:00pm
memolib Error Error Feb 15, 2026 4:00pm

@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Feb 15, 2026

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
❌ Deployment failed
View logs
memolib 6baafc7 Feb 15 2026, 03:50 PM

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Cette PR Snyk vise à corriger une vulnérabilité détectée dans les dépendances Python en relevant la version minimale de cryptography.

Changes:

  • Mise à jour de cryptography de >=43.0.3 vers >=46.0.5 dans la liste des dépendances.

python-jose[cryptography]>=3.4.0
passlib[bcrypt]>=1.7.4
cryptography>=43.0.3
cryptography>=46.0.5
Copy link

Copilot AI Feb 15, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

La mise à jour de cryptography est faite ici, mais d’autres manifests du dépôt permettent encore une version plus ancienne (ex. backend-python/requirements.txt contient cryptography>=43.0.3, et environment.yml cryptography>=42.0.0). Si ces fichiers sont utilisés pour l’installation/déploiement (cf. instructions dans RELEASE_NOTES.md), la vulnérabilité risque de rester présente. Suggestion : aligner la contrainte cryptography sur les autres fichiers de dépendances, ou documenter clairement quel fichier est la source de vérité.

Suggested change
cryptography>=46.0.5
cryptography>=43.0.3 # Aligné avec backend-python/requirements.txt

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants