We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents 2e36358 + a92a15b commit 589c0beCopy full SHA for 589c0be
setup.py
@@ -74,7 +74,7 @@
74
# See https://stackoverflow.com/a/14211600/728675 for more detail
75
install_requires=[
76
'requests>=2.0.0,<3',
77
- 'PyJWT[crypto]>=1.0.0,<3',
+ 'PyJWT[crypto]>=1.0.0,<3', # MSAL does not use jwt.decode(), therefore is insusceptible to CVE-2022-29217 so no need to bump to PyJWT 2.4+
78
79
'cryptography>=0.6,<40',
80
# load_pem_private_key() is available since 0.6
0 commit comments