Skip to content

Commit 87b6bfc

Browse files
committed
chore: bump cryptography to ~=50.0
Move the cryptography requirement from ~=49.0 to ~=50.0 (>=50.0,<51.0) and re-lock to 50.0.0. This clears CVE-2026-69247 / GHSA-g6cj-pr64-35w5 (PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle), which affects >=44.0.0,<50.0.0 and is fixed in 50.0.0. The SDK only uses long-stable cryptography APIs (Fernet in session.py, Cipher/algorithms/modes + default_backend in vault/_resource.py), which are unchanged in the 50.x line.
1 parent 3a6f383 commit 87b6bfc

2 files changed

Lines changed: 50 additions & 50 deletions

File tree

pyproject.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ authors = [{ name = "WorkOS", email = "sdk@workos.com" }]
88
requires-python = ">=3.10"
99

1010
dependencies = [
11-
"cryptography~=49.0",
11+
"cryptography~=50.0",
1212
"httpx~=0.28",
1313
"pyjwt~=2.12",
1414
"typing_extensions~=4.0; python_version < '3.11'",

0 commit comments

Comments
 (0)