From 21adf46ca96f253df46190124c464f17d2b0e656 Mon Sep 17 00:00:00 2001 From: Ingmar te Raa Date: Tue, 25 Jul 2023 14:25:37 +0200 Subject: [PATCH] Fix PYSEC-2023-102 vulnerability The SciPy dependency allows for installation of PYSEC-2023-102 vulnerability. This is fixed after 1.11.1. - https://nvd.nist.gov/vuln/detail/CVE-2023-25399 - https://vulners.com/osv/OSV:PYSEC-2023-102 --- setup.cfg | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/setup.cfg b/setup.cfg index a23715c..0501c16 100644 --- a/setup.cfg +++ b/setup.cfg @@ -15,7 +15,7 @@ install_requires = click >=8.0, <9.0 qlink-interface >=1.0, <2.0 numpy >=1.22 - scipy >=1.8 + scipy >=1.11.1 pyyaml >=6.0, <7.0 [options.extras_require] @@ -31,4 +31,5 @@ squidasm = [options.entry_points] console_scripts = - netqasm = netqasm.runtime.cli:cli \ No newline at end of file + netqasm = netqasm.runtime.cli:cli +