From 74e2450a5a29c08fdd2c1c6e96e735081e9c37b6 Mon Sep 17 00:00:00 2001
From: DeepSource Bot <bot@deepsource.io>
Date: Wed, 9 Apr 2025 21:55:57 +0000
Subject: [PATCH] =?UTF-8?q?fix(deps):=20update=20PyPI/werkzeug=20from=200.?=
 =?UTF-8?q?14.1=20=E2=86=92=200.15.5=20fix(deps):=20update=20PyPI/werkzeug?=
 =?UTF-8?q?=20from=200.14.1=20=E2=86=92=200.15.5?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This pull request addresses security vulnerabilities in this repository by updating dependencies to a safe version. We recommend manually auditing the package manifest files to verify the fixes.

### Upgrade Summary

**werkzeug**: 0.14.1 → 0.15.5

- Fixes [CVE-2019-14322](https://nvd.nist.gov/vuln/detail/CVE-2019-14322) (High severity)

- References:

  - [https://nvd.nist.gov/vuln/detail/CVE-2019-14322](https://nvd.nist.gov/vuln/detail/CVE-2019-14322)

  - [https://github.com/pallets/werkzeug](https://github.com/pallets/werkzeug)

  - [https://palletsprojects.com/blog/werkzeug-0-15-5-released](https://palletsprojects.com/blog/werkzeug-0-15-5-released)

  - [http://packetstormsecurity.com/files/163398/Pallets-Werkzeug-0.15.4-Path-Traversal.html](http://packetstormsecurity.com/files/163398/Pallets-Werkzeug-0.15.4-Path-Traversal.html)

---

🤖 This pull request was automatically generated by DeepSource SCA. To view all vulnerabilities in this repository, please visit the [dashboard](https://app.deepsource.com/gh/QuackatronHQ/sca-test/dependencies/).
---
 poetry.lock    | 12 ++++++------
 pyproject.toml |  2 +-
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/poetry.lock b/poetry.lock
index b7519e0..98b00d5 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -399,21 +399,21 @@ socks = ["PySocks (>=1.5.6,!=1.5.7,<2.0)"]
 
 [[package]]
 name = "werkzeug"
-version = "0.14.1"
+version = "0.15.5"
 description = "The comprehensive WSGI web application library."
 optional = false
-python-versions = "*"
+python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*"
 files = [
-    {file = "Werkzeug-0.14.1-py2.py3-none-any.whl", hash = "sha256:d5da73735293558eb1651ee2fddc4d0dedcfa06538b8813a2e20011583c9e49b"},
-    {file = "Werkzeug-0.14.1.tar.gz", hash = "sha256:c3fd7a7d41976d9f44db327260e263132466836cef6f91512889ed60ad26557c"},
+    {file = "Werkzeug-0.15.5-py2.py3-none-any.whl", hash = "sha256:87ae4e5b5366da2347eb3116c0e6c681a0e939a33b2805e2c0cbd282664932c4"},
+    {file = "Werkzeug-0.15.5.tar.gz", hash = "sha256:a13b74dd3c45f758d4ebdb224be8f1ab8ef58b3c0ffc1783a8c7d9f4f50227e6"},
 ]
 
 [package.extras]
-dev = ["coverage", "pytest", "sphinx", "tox"]
+dev = ["coverage", "pallets-sphinx-themes", "pytest", "sphinx", "sphinx-issues", "tox"]
 termcolor = ["termcolor"]
 watchdog = ["watchdog"]
 
 [metadata]
 lock-version = "2.0"
 python-versions = "^3.10"
-content-hash = "9b15edef2ddf55807e81677c76a5f4587a6c64c6db81905017aa2c07caad7f9d"
+content-hash = "1a43aa85b57c63a6a5dbf0a529c84314997b9b0ca851bf8ee8ae8bf14f3bf136"
diff --git a/pyproject.toml b/pyproject.toml
index d1d6f7f..d7b298e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -10,7 +10,7 @@ Flask = "1.0.2"
 PyYAML = "5.3.1"
 requests = "2.19.1"
 SQLAlchemy = "1.3.0"
-Werkzeug = "0.14.1"
+Werkzeug = "0.15.5"
 Jinja2 = "2.10.1"
 urllib3 = ">=1.21.1,<1.24"
 cryptography = "43.0.0"