From 678729269b3632a5d5469f0a4d6352727afa9670 Mon Sep 17 00:00:00 2001 From: ritiksah141 Date: Wed, 5 Aug 2026 00:57:05 +0100 Subject: [PATCH] fix: upgrade cryptography for CVE-2026-69247 Signed-off-by: ritiksah141 --- CHANGELOG.md | 1 + requirements.txt | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 408c9da..9f85576 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -26,6 +26,7 @@ OpenShield uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html). ### Security +- Upgraded cryptography to 50.0.0 to address CVE-2026-69247 - AI provider errors no longer expose upstream response details - Request body limits, AI rate limiting, and playbook path validation added - GitHub Actions dependencies pinned to immutable commit SHAs diff --git a/requirements.txt b/requirements.txt index f5d6642..bb2abcc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -21,7 +21,7 @@ pyjwt==2.13.0 requests==2.34.2 PyYAML==6.0.3 gunicorn==26.0.0 -cryptography==49.0.0 +cryptography==50.0.0 msrest==0.7.1 azure-mgmt-postgresqlflexibleservers==1.0.0b1 azure-keyvault-certificates==4.8.0