feat: update requests 2.31.0 => 2.32.2 to fix CVE-2024-35195

sw360 · May 25, 2024 · a2f5e6c · a2f5e6c
1 parent 4803f87
commit a2f5e6c
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 5 deletions.
diff --git a/ChangeLog.md b/ChangeLog.md
@@ -5,6 +5,10 @@
 
 # SW360 Base Library for Python
 
+## NEXT
+
+* update requests 2.31.0 => 2.32.2 to fix CVE-2024-35195.
+
 ## V1.5.0
 
 * when using CaPyCLI in a CI pipeline, connection problems to the SW360 server (5xx) cause

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -24,7 +24,7 @@ classifiers = [
 
 [tool.poetry.dependencies]
 python = "^3.8" # because 3.8 is the minimum requirement for isort, mypy
-requests = "^2.31.0" # fix CVE-2023-32681
+requests = "^2.32.2" # fix CVE-2024-35195 
 
 [tool.poetry.group.dev.dependencies]
 colorama = "^0.4.6"