alanhamlett/pip-update-requirements

Outdated certifi version includes untrusted certs

Closed this issue · 1 comments

edco commented

Sonatype Lifecycle now blocks the use of pur due to CVE-2023-37920 which affects versions of certifi prior to 2023.07.22.
For more details check this advisory.

alanhamlett commented

Fixed with 909fdb3.

  • 👍1