Skip to content

[Snyk] Security upgrade cryptography from 45.0.7 to 46.0.5#118

Open
mobby57 wants to merge 1 commit intomainfrom
snyk-fix-7c22af78d1b77d29eb99f6b9c3315380
Open

[Snyk] Security upgrade cryptography from 45.0.7 to 46.0.5#118
mobby57 wants to merge 1 commit intomainfrom
snyk-fix-7c22af78d1b77d29eb99f6b9c3315380

Conversation

@mobby57
Copy link
Owner

@mobby57 mobby57 commented Feb 14, 2026

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the pip dependencies of this project.

Snyk changed the following file(s):

  • backend-python/requirements.txt

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-15263096
Copilot AI review requested due to automatic review settings February 14, 2026 15:16
@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Feb 14, 2026

Deploying memolib with  Cloudflare Pages  Cloudflare Pages

Latest commit: ca3bdf1
Status:🚫  Build failed.

View logs

@vercel
Copy link

vercel bot commented Feb 14, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
iapostemanager-mfq1 Error Error Feb 14, 2026 3:27pm
memo-lib Error Error Feb 14, 2026 3:27pm
memo-lib-nak6 Error Error Feb 14, 2026 3:27pm
memo-lib-t22u Error Error Feb 14, 2026 3:27pm
memolib Error Error Feb 14, 2026 3:27pm

@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Feb 14, 2026

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
❌ Deployment failed
View logs
memolib ca3bdf1 Feb 14 2026, 03:18 PM

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Cette PR applique une mise à jour de sécurité de la bibliothèque cryptography de la version 45.0.7 vers 46.0.5 pour corriger 1 vulnérabilité de sécurité identifiée par Snyk (SNYK-PYTHON-CRYPTOGRAPHY-15263096). La bibliothèque cryptography est utilisée dans le projet pour le chiffrement AES-256 des données sensibles des clients conformément au RGPD.

Changes:

  • Mise à jour de la dépendance cryptography de >=43.0.3 vers >=46.0.5 dans backend-python/requirements.txt
  • Correction de vulnérabilité de sécurité critique dans la bibliothèque cryptography

Flask-CORS>=4.0.0
python-dateutil>=2.8.2
cryptography>=43.0.3
cryptography>=46.0.5
Copy link

Copilot AI Feb 14, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

La mise à jour de cryptography vers 46.0.5 devrait également être appliquée au fichier requirements-python.txt (ligne 73) qui contient encore cryptography>=43.0.3. Cette incohérence entre les fichiers de dépendances peut créer des problèmes de compatibilité et de sécurité selon l'environnement d'exécution utilisé.

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants