flintrock icon indicating copy to clipboard operation
flintrock copied to clipboard

Update parmaiko dependency to 2.10.1+

Open alex opened this issue 3 years ago • 0 comments

Older paramiko's are impacted by https://osv.dev/vulnerability/PYSEC-2022-166. flintrock currently pins to 2.7.2, which is impacted by this vuln and means everything installed into the same virtual environment is also pinned to this version.

The newer paramiko version is backwards compatible as far as I know, so hopefully this should be an easy upgrade.

alex avatar May 17 '22 14:05 alex