update python deps

SeldonIO · Jun 9, 2023 · 486b01c · 486b01c
1 parent f9d3950
commit 486b01c
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/python/setup.py b/python/setup.py
@@ -26,7 +26,7 @@
         "Flask-cors<4.0.0",
         "requests<3.0.0",
         "numpy<2.0.0",
-        "flatbuffers<2.0.0",
+        "flatbuffers<3.0.0",
         "protobuf>=3.20.2,<4.0.0",
         "grpcio<2.0.0",
         "Flask-OpenTracing >= 1.1.0, < 1.2.0",
@@ -39,13 +39,13 @@
         "prometheus_client >= 0.7.1, < 0.9.0",
         "werkzeug >= 2.1.1, < 2.3",
         # Addresses CVE SNYK-PYTHON-CRYPTOGRAPHY-3315328
-        "cryptography >= 39.0.1, < 40.1",
+        "cryptography <41.0",
         # Addresses CVE SNYK-PYTHON-PYYAML-590151
-        "PyYAML >= 5.4, < 5.5",
+        "PyYAML <7.0",
         # Addresses CVE PRISMA-2021-0020
         "click >= 8.0.0a1, < 8.1",
         # Addresses CVE CVE-2019-11236 and CVE-2020-26137 and SNYK-PYTHON-URLLIB3-1533435
-        "urllib3 >= 1.26.5, < 1.27",
+        "urllib3 <3.0.0",
         "importlib-metadata<5; python_version < '3.8'",
     ],
     extras_require=extras,