Constrain dependency for Babel >= 2.9.1 to address CVE-2021-42771

This commit is contained in:
Baptiste Jonglez 2021-12-09 21:10:08 +01:00
parent 915c832acc
commit b2a532279b

View file

@ -28,6 +28,7 @@ install_requires =
debts>=0.5,<1 debts>=0.5,<1
email_validator>=1.0,<2 email_validator>=1.0,<2
Flask-Babel>=1.0,<3 Flask-Babel>=1.0,<3
Babel>=2.9.1,<3 # CVE-2021-42771
Flask-Cors>=3.0.8,<4 Flask-Cors>=3.0.8,<4
Flask-Mail>=0.9.1,<1 Flask-Mail>=0.9.1,<1
Flask-Migrate>=2.5.3,<4 # Not following semantic versioning (e.g. https://github.com/miguelgrinberg/flask-migrate/commit/1af28ba273de6c88544623b8dc02dd539340294b) Flask-Migrate>=2.5.3,<4 # Not following semantic versioning (e.g. https://github.com/miguelgrinberg/flask-migrate/commit/1af28ba273de6c88544623b8dc02dd539340294b)