From 78ab14784f362569a76e964902be6ab139edf9a4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 14 Apr 2026 10:22:26 +0000 Subject: [PATCH] chore(deps): Bump cryptography from 46.0.5 to 46.0.7 in /backend Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.5 to 46.0.7. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/46.0.5...46.0.7) --- updated-dependencies: - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index 8f96a7e5..4c1b2274 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -23,7 +23,7 @@ bcrypt==5.0.0 argon2-cffi==25.1.0 pyotp==2.9.0 qrcode==7.4.2 -cryptography==46.0.5 +cryptography==46.0.7 # pyOpenSSL: transitive via pysaml2; pinning explicitly to avoid 22.0.0 # CVE-2026-27448 and CVE-2026-27459 that are pulled in as a transitive. pyOpenSSL==26.0.0