Skip to content

Conversation

florianvazelle
Copy link
Collaborator

@florianvazelle florianvazelle commented Sep 16, 2025

Description

Bumps aiohttp from >=3.10.11,<4 to >=3.12.14,<4 to fix CVE issue.

This PR also drop support for python 3.8 that is not supported any more by aiohttp.

Issues Resolved

Resolves #945

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: florian <florian@harfanglab.fr>
Signed-off-by: florian <florian@harfanglab.fr>
Signed-off-by: florian <florian@harfanglab.fr>
Signed-off-by: florian <florian@harfanglab.fr>
Signed-off-by: florian <florian@harfanglab.fr>
Signed-off-by: florian <florian@harfanglab.fr>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CVE-2025-53643 (High) detected in aiohttp-3.10.3-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
1 participant