Require pyjwt>=2.4.0 to avoid CVE-2022-29217

PyGithub · Oct 13, 2022 · 2e5af00 · 2e5af00
1 parent 7d3c3f0
commit 2e5af00
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -1,6 +1,6 @@
 pynacl>=1.4.0
 requests>=2.14.0
-pyjwt>=2.0
+pyjwt>=2.4.0
 sphinx<3
 Jinja2<3.1
 sphinx-rtd-theme<1.1

diff --git a/setup.py b/setup.py
@@ -106,7 +106,7 @@
         python_requires=">=3.6",
         install_requires=[
             "deprecated",
-            "pyjwt>=2.0",
+            "pyjwt>=2.4.0",
             "pynacl>=1.4.0",
             "requests>=2.14.0",
         ],