Skip to content

Bump aiohttp from 3.14.3 to 3.14.4 - #3761

Open
katsugtgz wants to merge 1 commit into
Drakkar-Software:masterfrom
katsugtgz:dep/aiohttp-3.14.4
Open

katsugtgz wants to merge 1 commit into
Drakkar-Software:masterfrom
katsugtgz:dep/aiohttp-3.14.4

Conversation

@katsugtgz

Copy link
Copy Markdown

Updates aiohttp to address GHSA-5wr8-gcqf-gqf3, GHSA-2g87-pp6c-29x5, and GHSA-494j-54xm-rwp3.

Evidence:

  • requirements.txt referenced aiohttp@3.14.3
  • osv-scanner reported those three IDs for aiohttp 3.14.3 before the update
  • updated version: aiohttp==3.14.4

Validation:

  • osv-scanner no longer reports any advisory for aiohttp after the update, and no new advisories were introduced
  • pip install -r requirements.txt succeeds on Python 3.13 and import aiohttp reports 3.14.4

Scope: dependency pin update only. ccxt requires aiohttp<3.15,>=3.14.3, so 3.14.4 stays within that range.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant