Fix CVE

[LOW] [email protected]: SNYK-PYTHON-CRYPTOGRAPHY-6913422 CWE-400 [Fixed in: 42.0.8].

[HIGH] [email protected]: SNYK-PYTHON-CRYPTOGRAPHY-7161587 CWE-416 [Fixed in: 42.0.8].

example-project/ci/requirements.txt

@@ -4,4 +4,4 @@ certifi>=2022.12.7 # not directly required, pinned by Snyk to avoid a vulnerabil
 requests>=2.32.0 # not directly required, pinned by Snyk to avoid a vulnerability
 urllib3>=1.26.17 # not directly required, pinned by Snyk to avoid a vulnerability
 idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability
-cryptography>=42.0.6 # not directly required, pinned by Snyk to avoid a vulnerability
+cryptography>=42.0.8 # not directly required, pinned by Snyk to avoid a vulnerability

example-project/requirements.txt

@@ -4,4 +4,4 @@ requests>=2.32.0 # not directly required, pinned by Snyk to avoid a vulnerabilit
 certifi>=2022.12.7 # not directly required, pinned by Snyk to avoid a vulnerability
 urllib3>=1.26.17 # not directly required, pinned by Snyk to avoid a vulnerability
 idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability
-cryptography>=42.0.6 # not directly required, pinned by Snyk to avoid a vulnerability
+cryptography>=42.0.8 # not directly required, pinned by Snyk to avoid a vulnerability

pyproject.toml

@@ -109,7 +109,7 @@ poetry-plugin-tweak-dependencies-version = { version = "1.0.0", optional = true
 poetry = { version = "1.2.1", optional = true }
 poetry-core = { version = "1.2.0", optional = true }
 protobuf = { version = "4.21.12", optional = true }
-cryptography = "42.0.7"
+cryptography = "42.0.8"
 certifi = "2023.7.22"
 Pygments = "2.15.1"
 urllib3 = { version = "1.26.18", optional = true }

requirements.txt

@@ -8,4 +8,4 @@ certifi>=2022.12.7 # not directly required, pinned by Snyk to avoid a vulnerabil
 urllib3>=1.26.17 # not directly required, pinned by Snyk to avoid a vulnerability
 jinja2>=3.1.3 # not directly required, pinned by Snyk to avoid a vulnerability
 idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability
-cryptography>=42.0.6 # not directly required, pinned by Snyk to avoid a vulnerability
+cryptography>=42.0.8 # not directly required, pinned by Snyk to avoid a vulnerability