fix(deps): vuln sqlalchemy (minor → 1.4.54) [dd-example/raw_files/flask/requirements.txt]

[gh-worker-campaigns-3e9aa4]

Summary: Critical-severity security update — 1 package upgraded (MINOR changes included)

Manifests changed:

• dd-example/raw_files/flask/requirements.txt (pip)

---

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.

---

Updates

Package	From	To	Type	Dep Type	Vulnerabilities Fixed
sqlalchemy	1.1.5	1.4.54	minor	Direct	6 CRITICAL

---

Security Details

🚨 Critical & High Severity (6 fixed)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In	Case
sqlalchemy	GHSA-887w-45rq-vxgf	CRITICAL	SQLAlchemy vulnerable to SQL Injection via order_by parameter	1.1.5	1.3.0b3	-
sqlalchemy	CVE-2019-7164	CRITICAL	-	1.1.5	-	-
sqlalchemy	PYSEC-2019-123	CRITICAL	-	1.1.5	1.3.0b3	-
sqlalchemy	PYSEC-2019-124	CRITICAL	-	1.1.5	1.2.18	-
sqlalchemy	CVE-2019-7548	CRITICAL	-	1.1.5	-	-
sqlalchemy	GHSA-38fc-9xqv-7f7q	CRITICAL	SQLAlchemy is vulnerable to SQL Injection via group_by parameter	1.1.5	1.2.19	-

⚠️ Dependencies that have Reached EOL (1)

Dependency	Unsafe Version	EOL Date	New Version	Path	Case
sqlalchemy	1.1.5	-	1.4.54	dd-example/raw_files/flask/requirements.txt	-

---

Review Checklist

Standard review:

• Review changes for compatibility with your code
• Check for breaking changes in release notes
• Run tests locally or wait for CI
• Approve and merge this PR

---

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

[dd-prapprover-prod-77c48c]

PRApprover will approve and merge this PR, FAQ, #dx-source-code-management

🛠️ PRApproval Status

• ✅ PR is eligible for auto-approval by rule dependency-management-version-updater - 2026-08-28T03:48:59Z
• ✅ CI tests passed - 2026-08-28T03:49:06Z
• ✅ Approved (commit: 2796733) - 2026-08-28T03:49:08Z
• ⬜ Merge Started
• ⬜ Merged

➡️ Current phase: waiting to merge...

[dd-prapprover-prod-77c48c]

This PR has been automatically approved by the DD PR Approver bot.