Hello everyone!
Quick question, any reason why the rsa dependency is pinned to 4.0 (requirements/requirements.txt rsa==4.0)?
I was running a scan and it triggered CVE-2020-13757.
An upgrade to 4,3 should be good to clear it ight?
Thanks!
David
David Flores (davidflores77@gmail.com) said:
Hello everyone!
Quick question, any reason why the rsa dependency is pinned to 4.0
(requirements/requirements.txt rsa==4.0)?I was running a scan and it triggered CVE-2020-13757
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13757>\.An upgrade to 4,3 should be good to clear it ight?
It's not actually included anyway, so it doesn't matter.
See requirements_*_uninstall.txt. Thanks to google for making us have to do
this.
Bill
Got it!, thanks Bill. I was looking for a reference for the package until you pointed the uninstall 
Good to know, thanks!