From bc105647722ba9f1d4e3a4c52dcfe9fde27ff669 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 21 Sep 2022 22:01:23 +0000 Subject: [PATCH] Bump python-jwt from 2.0.2 to 3.3.4 Bumps [python-jwt](https://github.com/davedoesdev/python-jwt) from 2.0.2 to 3.3.4. - [Release notes](https://github.com/davedoesdev/python-jwt/releases) - [Commits](https://github.com/davedoesdev/python-jwt/commits) --- updated-dependencies: - dependency-name: python-jwt dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index c2352bbc8..bf687bcfd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -159,7 +159,7 @@ python-gnupg==0.4.1 # Python JWT # https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/ -python-jwt==2.0.2 +python-jwt==3.3.4 # Python Keystone Client # CVE-2014-0105