From 5798cfaf4c76ac3feee033bdd6f194d6ff31f557 Mon Sep 17 00:00:00 2001 From: Gavin D'souza Date: Wed, 9 Feb 2022 12:12:24 +0530 Subject: [PATCH] build: Update iPython dependency Updating dependency due to arbitrary code execution vulnerability in IPython that stems from IPython executing untrusted files in CWD. This vulnerability allows one user to run code as another. ref: https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699 Weaknesses: CWE-250, CWE-269, CWE-279 CVE ID: CVE-2022-21699 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 114ab5f61d..f47c296843 100644 --- a/requirements.txt +++ b/requirements.txt @@ -21,7 +21,7 @@ googlemaps~=4.4.5 gunicorn~=20.1.0 html2text==2020.1.16 html5lib~=1.1 -ipython~=7.27.0 +ipython~=7.31.1 Jinja2~=3.0.1 ldap3~=2.9 markdown2~=2.4.0