Pin mysql-connector-python to >=9.1.0 for CVE-2024-21272

Co-authored-by: dtrai2 <[email protected]>
fkie-cad · Oct 28, 2024 · 1ab6e4d · 1ab6e4d
1 parent 77e7fce
commit 1ab6e4d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pyproject.toml b/pyproject.toml
@@ -67,7 +67,7 @@ dependencies = [
   "jsonref",
   "luqum",
   "more-itertools==8.10.0",
-  "mysql-connector-python",
+  "mysql-connector-python>=9.1.0",  #  CVE-2024-21272
   "numpy>=1.26.0",
   "opensearch-py",
   "prometheus_client",