Skip to content

Commit 37347a3

Browse files
committed
fix(security): require PyJWT >=2.12.0 (GHSA crit header)
Resolves Dependabot alert #1; uv lock updated pyjwt 2.11.0 -> 2.12.1 Made-with: Cursor
1 parent 5ef74f3 commit 37347a3

2 files changed

Lines changed: 9 additions & 3 deletions

File tree

netops-mcp-server/pyproject.toml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,7 @@ readme = "README.md"
66
requires-python = ">=3.10"
77
dependencies = [
88
"fastmcp>=2.0",
9+
"pyjwt>=2.12.0", # GHSA: override transitive PyJWT (crit header); Dependabot alert #1
910
"httpx>=0.24",
1011
"requests>=2.28",
1112
"netmiko>=4.0",

netops-mcp-server/uv.lock

Lines changed: 8 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)