Commit 1c27748
Kubudak90
fix: bump web3 upper bound to allow security fix GHSA-5hr4-253g-cpx2
The web3 dependency pin (<=7.10.0) was blocking the security fix for
SSRF via CCIP Read (GHSA-5hr4-253g-cpx2) which shipped in web3==7.15.0.
This change updates the constraint from:
web3>=7.6.0,<=7.10.0
to:
web3>=7.6.0,<8.0.0
Allowing users to install the patched web3 version while maintaining
compatibility with the existing API.
Fixes #6361 parent 21512f9 commit 1c27748
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
14 | 14 | | |
15 | 15 | | |
16 | 16 | | |
17 | | - | |
| 17 | + | |
18 | 18 | | |
19 | 19 | | |
20 | 20 | | |
| |||
0 commit comments