fix: plancher pyjwt >=2.14.0 - CVE-2026-102274 corrige le job security BUG-095

This commit is contained in:
2026-09-29 17:57:35 -04:00
parent 383ffa6a65
commit 1bacfd69d9
13 changed files with 39 additions and 19 deletions
+2 -1
View File
@@ -252,7 +252,8 @@ class TestDependencySecurityFloors:
#: (paquet, plancher minimal, advisories corrigées au-dessus)
FLOORS = {
"pypdf": (6, 16, 1), # PYSEC-2026-3910, PYSEC-2026-3911 (fix 6.16.1)
"pyjwt": (2, 13, 0), # PYSEC-2026-178 (fix 2.13.0)
# BUG-095 : 2.13.0 a son propre advisory (CVE-2026-102274, fix 2.14.0).
"pyjwt": (2, 14, 0), # PYSEC-2026-178 (2.13.0) puis CVE-2026-102274 (2.14.0)
}
def test_security_floors_are_declared(self):