From cff83f4b66086a768c659109cecae6abe98b1c08 Mon Sep 17 00:00:00 2001
From: Yunchu Lee <yunchu.lee@intel.com>
Date: Thu, 25 Apr 2024 12:28:52 +0900
Subject: [PATCH] Update pymongo version and constraint (#3396)

---
 CHANGELOG.md         | 1 +
 requirements/api.txt | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8da7a31f189..4b322d280d9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,7 @@ All notable changes to this project will be documented in this file.
 
 ### Enhancements
 
+- Update pymongo version to 4.6.3 for resolving CVE-2024-21506 (<https://github.com/openvinotoolkit/training_extensions/pull/3396>)
 - Use torchvision in MRCNN on CUDA (<https://github.com/openvinotoolkit/training_extensions/pull/3347>)
 - Update IPEX version in installation guide documentation (<https://github.com/openvinotoolkit/training_extensions/pull/3343>)
 - Update benchmark (<https://github.com/openvinotoolkit/training_extensions/pull/3338>)
diff --git a/requirements/api.txt b/requirements/api.txt
index 6fbba152560..3b80079b4d4 100644
--- a/requirements/api.txt
+++ b/requirements/api.txt
@@ -5,7 +5,7 @@ networkx>=2.6,<=2.8.0
 numpy>=1.21.0,<=1.23.4  # np.bool was removed in 1.24.0 which was used in openvino runtime
 omegaconf>=2.1.1
 opencv-python>=4.5
-pymongo==4.5.0
+pymongo>=4.6.3,<5   # required for bson module
 scikit-learn==1.3.*
 Shapely>=1.7.1,<=1.8.0
 imagesize==1.4.1