Address CVE SNYK-PYTHON-WERKZEUG-6035177 and SNYK-PYTHON-WERKZEUG-680…

…8933
SeldonIO · May 10, 2024 · 7ac8063 · 7ac8063
1 parent c9ee03b
commit 7ac8063
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/python/setup.py b/python/setup.py
@@ -36,7 +36,8 @@
         "gunicorn >= 19.9.0, < 20.2.0",
         "setuptools >= 65.5.1",
         "prometheus_client >= 0.7.1, < 0.9.0",
-        "werkzeug >= 2.1.1, < 2.3",
+        # Addresses CVE SNYK-PYTHON-WERKZEUG-6035177 and SNYK-PYTHON-WERKZEUG-6808933
+        "werkzeug >= 2.1.1, <= 3.0.3",
         # Addresses CVE SNYK-PYTHON-CRYPTOGRAPHY-3315328
         "cryptography >= 39.0.1, < 41.1",
         # Addresses CVE SNYK-PYTHON-PYYAML-590151