Commit 87b6bfc
committed
chore: bump cryptography to ~=50.0
Move the cryptography requirement from ~=49.0 to ~=50.0 (>=50.0,<51.0)
and re-lock to 50.0.0. This clears CVE-2026-69247 / GHSA-g6cj-pr64-35w5
(PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle),
which affects >=44.0.0,<50.0.0 and is fixed in 50.0.0.
The SDK only uses long-stable cryptography APIs (Fernet in session.py,
Cipher/algorithms/modes + default_backend in vault/_resource.py), which
are unchanged in the 50.x line.1 parent 3a6f383 commit 87b6bfc
2 files changed
Lines changed: 50 additions & 50 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
8 | 8 | | |
9 | 9 | | |
10 | 10 | | |
11 | | - | |
| 11 | + | |
12 | 12 | | |
13 | 13 | | |
14 | 14 | | |
| |||
0 commit comments