mirror of
https://github.com/ansible/awx.git
synced 2026-10-31 06:26:15 -02:30
Bump PyJWT to address CVE-2026-102268
Pin PyJWT>=2.14.0 in requirements.in to address CVE-2026-102268 (authentication bypass via improper public key validation). Regenerated requirements.txt via make docker_update_requirements. Assisted-By: Claude Code Signed-off-by: Rodrigo Horie <rodrigo.horie@hotmail.com>
This commit is contained in:
@@ -384,8 +384,9 @@ pygithub==2.8.1
|
||||
# via
|
||||
# -r /awx_devel/requirements/requirements.in
|
||||
# awx-plugins-core
|
||||
pyjwt[crypto]==2.10.1
|
||||
pyjwt[crypto]==2.15.1
|
||||
# via
|
||||
# -r /awx_devel/requirements/requirements.in
|
||||
# adal
|
||||
# django-ansible-base
|
||||
# msal
|
||||
|
||||
Reference in New Issue
Block a user