Addressing Address SNYK-PYTHON-GUNICORN-6615672, SNYK-PYTHON-CRYPTOGR…

…APHY-6126975
SeldonIO · Apr 19, 2024 · d41e640 · d41e640
1 parent f855d0a
commit d41e640
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/python/setup.py b/python/setup.py
@@ -33,12 +33,13 @@
         "jaeger-client >= 4.1.0, < 4.5.0",
         "grpcio-opentracing >= 1.1.4, < 1.2.0",
         "grpcio-reflection < 2.0.0",
-        "gunicorn >= 19.9.0, < 20.2.0",
+        # Addresses CVE SNYK-PYTHON-GUNICORN-6615672
+        "gunicorn >= 19.9.0, <= 22.0.0",
         "setuptools >= 65.5.1",
         "prometheus_client >= 0.7.1, < 0.9.0",
         "werkzeug >= 2.1.1, < 2.3",
-        # Addresses CVE SNYK-PYTHON-CRYPTOGRAPHY-3315328
-        "cryptography >= 39.0.1, < 41.1",
+        # Addresses CVE SNYK-PYTHON-CRYPTOGRAPHY-3315328, SNYK-PYTHON-CRYPTOGRAPHY-6126975
+        "cryptography >= 39.0.1, <= 42.0.0",
         # Addresses CVE SNYK-PYTHON-PYYAML-590151
         "PyYAML >= 5.4, <= 6.0.1",
         # Addresses CVE PRISMA-2021-0020