From b8fcffd4842df1bc9dc2820d0028d5bbb1ad49d0 Mon Sep 17 00:00:00 2001 From: David Venable Date: Mon, 27 Nov 2023 08:52:29 -0800 Subject: [PATCH] Updates werkzeug to 3.0.1 which fixes CVE-2023-46136. This required updating to dash 2.14.1 as 2.13 does not support newer versions of werkzeug. Resolves #3552. (#3690) Signed-off-by: David Venable --- .../trace-analytics-sample-app/sample-app/requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/examples/trace-analytics-sample-app/sample-app/requirements.txt b/examples/trace-analytics-sample-app/sample-app/requirements.txt index 5c39bb7793..2b55521c2b 100644 --- a/examples/trace-analytics-sample-app/sample-app/requirements.txt +++ b/examples/trace-analytics-sample-app/sample-app/requirements.txt @@ -1,4 +1,4 @@ -dash==2.13.0 +dash==2.14.1 mysql-connector==2.2.9 opentelemetry-exporter-otlp==1.20.0 opentelemetry-instrumentation-flask==0.41b0 @@ -7,4 +7,4 @@ opentelemetry-instrumentation-requests==0.41b0 opentelemetry-sdk==1.20.0 protobuf==3.20.3 urllib3==2.0.7 -werkzeug==2.2.3 \ No newline at end of file +werkzeug==3.0.1 \ No newline at end of file