Merge pull request #9619 from haskell/cve-2024-22195

mergify[bot] · web-flow · commit 9712115d13ed · 2024-01-18T23:05:18.000Z
update jinja2 per CVE-2024-22195
diff --git a/doc/requirements.in b/doc/requirements.in
@@ -8,3 +8,5 @@ Pygments >= 2.7.4
 certifi >= 2023.07.22
 # CVE-2023-45803
 urllib3 >= 2.0.7
+# CVE-2024-22195
+jinja2 == 3.1.3
diff --git a/doc/requirements.txt b/doc/requirements.txt
@@ -23,8 +23,10 @@ idna==3.4
     # via requests
 imagesize==1.4.1
     # via sphinx
-jinja2==3.1.2
-    # via sphinx
+jinja2==3.1.3
+    # via
+    #   -r requirements.in
+    #   sphinx
 jsonpointer==2.3
     # via sphinx-jsonschema
 markupsafe==2.1.2
