Flask security update

The Pallets Project Flask before 1.0 is affected by: unexpected memory
usage. The impact is: denial of service.
The attack vector is: crafted encoded JSON data. The fixed version is:
1. NOTE: this may overlap CVE-2018-1000656.

Signed-off-by: David Dashyan <mail@davie.li>
This commit is contained in:
David Dashyan 2020-05-28 23:04:15 +03:00
parent 4a008e51e3
commit 7f30c658a0
No known key found for this signature in database
GPG Key ID: 5D619778FD611992

View File

@ -77,7 +77,7 @@ install_requires = [
'cryptoconditions==0.8.0',
'python-rapidjson~=0.6.0',
'logstats~=0.2.1',
'flask~=0.12.4',
'flask==1.0.0',
'flask-cors~=3.0.0',
'flask-restful~=0.3.0',
'requests~=2.20.0',