add constraint against yanked version

sanderegg · sanderegg · commit 7e74cd11fba8 · 2025-05-08T18:50:04.000+02:00
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
@@ -9,7 +9,7 @@
 #
 # Vulnerabilities -----------------------------------------------------------------------------------------
 #
-aiohttp>=3.7.4                                # https://github.com/advisories/GHSA-v6wp-4m6f-gcjg
+aiohttp>=3.7.4, !=3.11.13                     # https://github.com/advisories/GHSA-v6wp-4m6f-gcjg, 3.11.13 was yanked https://github.com/aio-libs/aiohttp/issues/10617
 certifi>=2023.7.22                            # https://github.com/advisories/GHSA-xqr8-7jwr-rhp7
 cryptography>=41.0.6                          # https://github.com/advisories/GHSA-v8gr-m533-ghj9
 httpx>=0.23.0                                 # https://github.com/advisories/GHSA-h8pj-cxx2-jfg2 / CVE-2021-41945

Original file line number	Diff line number	Diff line change
`@@ -9,7 +9,7 @@`
`9`	`9`	`#`
`10`	`10`	`# Vulnerabilities -----------------------------------------------------------------------------------------`
`11`	`11`	`#`
`12`		`-aiohttp>=3.7.4 # https://github.com/advisories/GHSA-v6wp-4m6f-gcjg`
	`12`	`+aiohttp>=3.7.4, !=3.11.13 # https://github.com/advisories/GHSA-v6wp-4m6f-gcjg, 3.11.13 was yanked https://github.com/aio-libs/aiohttp/issues/10617`
`13`	`13`	`certifi>=2023.7.22 # https://github.com/advisories/GHSA-xqr8-7jwr-rhp7`
`14`	`14`	`cryptography>=41.0.6 # https://github.com/advisories/GHSA-v8gr-m533-ghj9`
`15`	`15`	`httpx>=0.23.0 # https://github.com/advisories/GHSA-h8pj-cxx2-jfg2 / CVE-2021-41945`