-
Notifications
You must be signed in to change notification settings - Fork 824
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Upgrade V1 Python microservice Cryptography Package #5471
Labels
Comments
Any update on this @mwm5945 ? |
Nope 🤷♂️On Jun 11, 2024, at 9:57 AM, miha g ***@***.***> wrote:
Any update on this @mwm5945 ?
—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you were mentioned.Message ID: ***@***.***>
|
Since there are security concerns with |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
The crpytography package has released a new major version, which includes vulnerability fixes. Consumers of the microservice are unable to upgrade their own dependencies as it conflicts with the version Seldon allows.
Describe the bug
This line restricts the version of cryptography that can be installed:
seldon-core/python/setup.py
Line 41 in 60ffac4
To reproduce
Attempt to install seldon-core with
cryptography==42.x.x
, i.e.Expected behaviour
Latest patched version of
cryptography
package can be used.The text was updated successfully, but these errors were encountered: