Merge pull request #10030 from geekosaur/cve-2024-34064

update jinja2 per CVE-2024-34064
haskell · May 20, 2024 · 4072eb8 · 4072eb8
2 parents f9e242f + b61946f
commit 4072eb8
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/doc/requirements.in b/doc/requirements.in
@@ -8,7 +8,7 @@ Pygments >= 2.7.4
 certifi >= 2023.07.22
 # CVE-2023-45803
 urllib3 >= 2.0.7
-# CVE-2024-22195
-jinja2 == 3.1.3
+# CVE-2024-34064
+jinja2 >= 3.1.4
 # CVE-2024-3651
 idna >= 3.7
diff --git a/doc/requirements.txt b/doc/requirements.txt
@@ -25,7 +25,7 @@ idna==3.7
     #   requests
 imagesize==1.4.1
     # via sphinx
-jinja2==3.1.3
+jinja2==3.1.4
     # via
     #   -r requirements.in
     #   sphinx