External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-10-29 22:03:20 -02:30
Code Issues Packages Projects Releases Wiki Activity

Bump PyJWT to address CVE-2026-102268

Browse Source 
Pin PyJWT>=2.14.0 in requirements.in to address CVE-2026-102268
(authentication bypass via improper public key validation).
Regenerated requirements.txt via make docker_update_requirements.

Assisted-By: Claude Code
Signed-off-by: Rodrigo Horie <rodrigo.horie@hotmail.com>
This commit is contained in:
Rodrigo Horie
2026-10-19 15:09:46 -03:00
parent 6fc51b6d25
commit 6841b784ea
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
requirements/requirements.in
+1
View File
@@ -49,6 +49,7 @@ psutil
pyasn1>=0.6.2 # CVE-2026-2349 pyasn1>=0.6.2 # CVE-2026-2349
pygerduty pygerduty
PyGithub PyGithub
PyJWT>=2.14.0 # CVE-2026-102268
pyopenssl pyopenssl
pyparsing>3.0 # Upgraded to v3 and changed import patterns pyparsing>3.0 # Upgraded to v3 and changed import patterns
python-daemon python-daemon
requirements/requirements.txt
+2 -1
View File
@@ -384,8 +384,9 @@ pygithub==2.8.1
# via # via
# -r /awx_devel/requirements/requirements.in # -r /awx_devel/requirements/requirements.in
# awx-plugins-core # awx-plugins-core
pyjwt[crypto]==2.10.1 pyjwt[crypto]==2.15.1
# via # via
# -r /awx_devel/requirements/requirements.in
# adal # adal
# django-ansible-base # django-ansible-base
# msal # msal