From 6979648a148c5a8813b5e10e1ded0732e03b1a62 Mon Sep 17 00:00:00 2001 From: 1ngabo <162403908+Ingabreezy@users.noreply.github.com> Date: Fri, 30 Jan 2026 02:13:43 +1100 Subject: [PATCH] Update requests library version to 2.32.4 Trivy flagged CVE-2024-47081 in requests 2.31.0 (netrc credentials leak via malicious URLs). Updated requests to fixed version 2.32.4 in Core DW Infrastructure/app/requirements.txt. --- Core DW Infrastructure/app/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Core DW Infrastructure/app/requirements.txt b/Core DW Infrastructure/app/requirements.txt index dc1bfb5..ae4d232 100644 --- a/Core DW Infrastructure/app/requirements.txt +++ b/Core DW Infrastructure/app/requirements.txt @@ -2,7 +2,7 @@ streamlit==1.48.0 minio==7.1.11 python-dotenv==1.0.0 pyspark==3.5.0 -requests==2.31.0 +requests==2.32.4 psycopg2-binary==2.9.6 elasticsearch==7.17.9 pandas==2.0.3