dependencies: fix security issues

* Forces jinja2 > 2.11.2. * Forces cryptography > 3.3.1. Co-Authored-by: Johnny Mariéthoz <[email protected]>
rero · Mar 1, 2021 · 7e73a65 · 7e73a65
1 parent b7d984d
commit 7e73a65
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 24 deletions.
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -75,9 +75,10 @@ python-dotenv = "^0.13.0"
 invenio-sip2 = {git = "https://github.com/inveniosoftware-contrib/invenio-sip2.git", optional = true}
 flask-cors = ">3.0.8"
 celery = ">=5.0.0"
-cryptography = ">3.2"
+cryptography = ">3.3.1"
 freezegun = "^1.1.0"
 lazyreader = ">1.0.0"
+jinja2 = ">2.11.2"
 
 [tool.poetry.dev-dependencies]
 ## Python packages development dependencies (order matters)