fix: vulnerable to denial of service from specially crafted inputs to…

… idna.encode Signed-off-by: yihong0618 <[email protected]>
yihong0618 · Apr 12, 2024 · 74f9de2 · 74f9de2
1 parent d0dfa75
commit 74f9de2
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 5 deletions.
diff --git a/pdm.lock b/pdm.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -28,6 +28,7 @@ dependencies = [
     "numexpr>=2.8.6",
     "dashscope==1.10.0",
     "httpcore==0.15.0",
+    "idna==3.7",
     "azure-cognitiveservices-speech>=1.37.0",
 ]
 license = {text = "MIT"}

diff --git a/requirements.txt b/requirements.txt
@@ -41,7 +41,7 @@ httpcore==0.15.0
 httplib2==0.22.0
 httpx==0.24.1
 hyperframe==6.0.1
-idna==3.6
+idna==3.7
 jeepney==0.8.0; "bsd" in sys_platform and python_version >= "3.7" or sys_platform == "linux" and python_version >= "3.7"
 jsonpatch==1.33
 jsonpointer==2.4