leora
9e76d68344
Raise the floor past CVE-2024-12797-affected wheels (43.x / 44.0.0). Add constraints.txt (exact 44.0.1) and requirements.lock.txt with sha256 hashes for cryptography and its runtime deps.
6 lines
312 B
Plaintext
6 lines
312 B
Plaintext
# Runtime dependency for Ed25519 + AES-GCM (SealedStore / optional key files).
|
|
# Lower bound 44.0.1: older 43.x/44.0.0 wheels ship OpenSSL affected by
|
|
# CVE-2024-12797 (GHSA-79v4-65xg-pq4g). Upper bound <45 keeps upgrades deliberate.
|
|
# For hash-pinned install see requirements.lock.txt.
|
|
cryptography>=44.0.1,<45
|