Skip to content

Commit 7540afe

Browse files
committed
fix: Bump up protobuf to solve CVE-2026-0994
This commit bumps up the version of `protobuf` dependency to solve CVE-2026-0994. Enabled `protobuf` version 5.29.6+ and 6.33.5+. Signed-off-by: Paulo Vital <paulo.vital@ibm.com>
1 parent 371febc commit 7540afe

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

pyproject.toml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,8 @@ dependencies = [
4747
"basictracer>=3.1.0",
4848
"fysom>=2.1.2",
4949
"opentracing>=2.3.0",
50-
"protobuf<5.0.0",
50+
"protobuf>=5.29.6; python_version < '3.9'",
51+
"protobuf (>=6.33.5,<7.0); python_version >= '3.9'",
5152
"requests>=2.6.0",
5253
"six>=1.12.0",
5354
"urllib3>=1.26.5",

0 commit comments

Comments
 (0)