diff --git a/requirements-lock.txt b/requirements-lock.txt index d42dfdaa9..9a219c0a7 100644 --- a/requirements-lock.txt +++ b/requirements-lock.txt @@ -32,7 +32,7 @@ PyOpenGL==3.1.10 flask==3.1.3 # Security & Utilities -cryptography==49.0.0 +cryptography==50.0.0 defusedxml==0.7.1 PyYAML==6.0.3 pillow==12.3.0 diff --git a/requirements.txt b/requirements.txt index b01578c0d..9d2f31ebc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -37,7 +37,7 @@ pydantic>=2.0.0 # Data validation using Python type annotations pydantic-settings>=2.0.0 # Settings management for Pydantic v2 # Security & Encryption -cryptography>=49.0.0 # Cryptographic recipes and primitives +cryptography>=50.0.0 # Cryptographic recipes and primitives defusedxml>=0.7.0 # Safe XML parsing (mitigates XML bomb / XXE attacks) pygments>=2.20.0,<2.21.0 # Pinned: CVE-2026-4539 affects 2.19.x (transitive via rich/pip-audit)