You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Bump cryptography to 43.0.1 in llvm/utils/git/requirements.txt (#15360)
PR to bump dependency version to resolve security vulnerability found.
pyca/cryptography's wheels include a statically linked copy of OpenSSL.
The versions of OpenSSL included in cryptography 37.0.0-43.0.0 are
vulnerable to a security issue. More details about the vulnerability
itself can be found in
https://openssl-library.org/news/secadv/20240903.txt.
0 commit comments