From 1f1d2db11b22735a95bde1fef693757fd07d734e Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 13 Feb 2026 15:08:00 +0000
Subject: [PATCH] fix: requirements/libraries.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-15263096
---
 requirements/libraries.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements/libraries.txt b/requirements/libraries.txt
index 4edccee0a0f..c3b2e04d526 100644
--- a/requirements/libraries.txt
+++ b/requirements/libraries.txt
@@ -7,7 +7,7 @@ boto3==1.7.80
 # has an open-ended dependency on cryptography. cryptography 3.0 currently
 # doesn't build in our build environment. This pins the last release that
 # does until we can solve that problem.
-cryptography==2.9.2
+cryptography==46.0.5
 dj-database-url==0.5.0
 djangorestframework==3.11.1
 django-csp==3.4