Merge pull request haskell#9619 from haskell/cve-2024-22195

update jinja2 per CVE-2024-22195
grayjay · Jan 18, 2024 · 9712115 · 9712115
2 parents 4d35045 + f190828
commit 9712115
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/doc/requirements.in b/doc/requirements.in
@@ -8,3 +8,5 @@ Pygments >= 2.7.4
 certifi >= 2023.07.22
 # CVE-2023-45803
 urllib3 >= 2.0.7
+# CVE-2024-22195
+jinja2 == 3.1.3
diff --git a/doc/requirements.txt b/doc/requirements.txt
@@ -23,8 +23,10 @@ idna==3.4
     # via requests
 imagesize==1.4.1
     # via sphinx
-jinja2==3.1.2
-    # via sphinx
+jinja2==3.1.3
+    # via
+    #   -r requirements.in
+    #   sphinx
 jsonpointer==2.3
     # via sphinx-jsonschema
 markupsafe==2.1.2