oci/zeronet
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update merkletools dep

Browse source
This commit is contained in:
caryoscelus 2023-07-05 15:03:44 +00:00
parent d16c71966b
commit 1f19ab604e
2 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
CHANGELOG.md
View file

@ -1,5 +1,6 @@
### zeronet-conservancy 0.7.9+ ### zeronet-conservancy 0.7.9+
- fixed ReDoS in file editor (UiFileManager plugin) due to outdated codemirror (@caryoscelus) - update merkletools dependency to avoid legacy pysha3 (@caryoscelus)
- fix ReDoS in file editor (UiFileManager plugin) due to outdated codemirror (@caryoscelus)
### zeronet-conservancy 0.7.9 (2023-07-02) (f966a4203fe33bd9f35) ### zeronet-conservancy 0.7.9 (2023-07-02) (f966a4203fe33bd9f35)
maintainers: @caryoscelus -> none maintainers: @caryoscelus -> none

3
requirements.txt
View file

@ -2,7 +2,8 @@ setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerabil
gevent>=20.9.0 gevent>=20.9.0
msgpack>=0.6.0 msgpack>=0.6.0
base58 base58
merkletools # for some reason nobody released fresh merkletools that don't require on outdated pysha3
git+https://github.com/Tierion/pymerkletools.git@f10d71e2cd529a833728e836dc301f9af502d0b0
rsa rsa
PySocks>=1.6.8 PySocks>=1.6.8
pyasn1 pyasn1