From 44ef0682b080ae06e36e695d4456109be30909b2 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 23 Oct 2025 06:51:25 +0000 Subject: [PATCH] fix: update pyOpenSSL to >=25.3.0 to address security vulnerability MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Updates pyOpenSSL from >=24.3.0 to >=25.3.0 - This resolves CVE affecting cryptography package versions >=37.0.0 & <43.0.1 - pyOpenSSL 25.3.0 requires cryptography>=45.0.7, which is above the vulnerable range - Fixes issue #1545 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- pyproject.toml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index bbdca592..faa545bc 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -31,7 +31,7 @@ dependencies = [ "rank-bm25~=0.2", "snowballstemmer~=2.2", "pydantic>=2.10", - "pyOpenSSL>=24.3.0", + "pyOpenSSL>=25.3.0", "psutil>=6.1.1", "PyYAML>=6.0", "nltk>=3.9.1", diff --git a/requirements.txt b/requirements.txt index 0e66b3f0..24b243ef 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19,7 +19,7 @@ rank-bm25~=0.2 colorama~=0.4 snowballstemmer~=2.2 pydantic>=2.10 -pyOpenSSL>=24.3.0 +pyOpenSSL>=25.3.0 psutil>=6.1.1 PyYAML>=6.0 nltk>=3.9.1