Skip to content

Commit 74b11c8

Browse files
kbukum1Copilot
andcommitted
Bump poetry to 2.3.3 to fix CVE-2026-34591 and GHSA-73h3-mf4w-8647
Poetry 2.2.1 has path traversal vulnerabilities. Use 2.3.3 which is the minimum patched version. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent dc8b825 commit 74b11c8

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

uv/helpers/requirements.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ flake8==7.3.0
44
hashin==1.0.5
55
pipenv==2024.4.1
66
plette==2.2.1
7-
poetry==2.2.1
7+
poetry==2.3.3
88
# TODO: Replace 3p package `tomli` with 3.11's new stdlib `tomllib` once we drop support for Python 3.10.
99
tomli==2.4.1
1010
uv==0.11.8

0 commit comments

Comments
 (0)