Skip to content

fix: update cryptography to 47.0.0 to address CVE-2026-39892#889

Merged
mayankmendix merged 2 commits into
mendix:developfrom
Pri1235:fix/update-cryptography-46.0.7
Apr 28, 2026
Merged

fix: update cryptography to 47.0.0 to address CVE-2026-39892#889
mayankmendix merged 2 commits into
mendix:developfrom
Pri1235:fix/update-cryptography-46.0.7

Conversation

@Pri1235
Copy link
Copy Markdown

@Pri1235 Pri1235 commented Apr 23, 2026

Summary

Updates cryptography library from 46.0.5 to 46.0.7 to fix CVE-2026-39892

Details

  • CVE: CVE-2026-39892
  • Severity: Buffer overflow vulnerability in non-contiguous buffer handling
  • Fixed Version: 46.0.7
  • (Edit: version changed to 47.0.0)

Testing

  • ✅ All 184 unit tests passing
  • ✅ All linting checks passing
  • ✅ Requirements regenerated with Python 3.10

Related

@Pri1235
Copy link
Copy Markdown
Author

Pri1235 commented Apr 27, 2026

All the unit tests passed after version upgrade to 47.0.0

priyal.chawda@mendix.com added 2 commits April 27, 2026 19:01
- Updated cryptography from 46.0.5 to 46.0.7
- Fixes buffer overflow vulnerability in non-contiguous buffer handling
- Regenerated requirements.txt with Python 3.10
- All unit tests passing (184 passed)
- All linting checks passing
@Pri1235 Pri1235 force-pushed the fix/update-cryptography-46.0.7 branch from f563259 to 4e0365b Compare April 27, 2026 13:31
@Pri1235 Pri1235 changed the title fix: update cryptography to 46.0.7 to address CVE-2026-39892 fix: update cryptography to 47.0.0 to address CVE-2026-39892 Apr 27, 2026
Copy link
Copy Markdown
Contributor

@mayankmendix mayankmendix left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good

@mayankmendix mayankmendix merged commit 244e12f into mendix:develop Apr 28, 2026
26 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants