From f445b5741615e5a5c24f1f968d094e562c21cba7 Mon Sep 17 00:00:00 2001 From: hellno Date: Tue, 9 Nov 2021 11:12:51 +0100 Subject: [PATCH 1/2] Fix vulnerability in starbank-ecdsa dependency see https://github.com/advisories/GHSA-9wx7-jrvc-28mm for details --- setup.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/setup.py b/setup.py index 8ec7329c..365ebb50 100644 --- a/setup.py +++ b/setup.py @@ -11,7 +11,7 @@ def getRequires(): deps = [ 'python_http_client>=3.2.1', - 'starkbank-ecdsa>=1.0.0,<2.0.0' + 'starkbank-ecdsa>=2.0.1' ] return deps From c4f11c7bc74dceedb87eea7da1995739d693446e Mon Sep 17 00:00:00 2001 From: Jennifer Mah Date: Tue, 9 Nov 2021 14:47:45 -0800 Subject: [PATCH 2/2] update requirements.txt --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 37e68e9d..04c3b87e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -3,4 +3,4 @@ PyYAML>=4.2b1 python-http-client>=3.2.1 six==1.11.0 pytest==3.8.2 -starkbank-ecdsa>=1.0.0,<2.0.0 +starkbank-ecdsa>=2.0.1