PyPI/poetry-plugin-tweak-dependencies-version: medium 4.4

poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645

Action: Upgrade poetry-plugin-tweak-dependencies-version to 1.5.6 or later.

pip install poetry-plugin-tweak-dependencies-version==1.5.6

Affected

Fixed versions

Sources

• osv: GHSA-5qvp-pr9f-2g2v
• https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2
• https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version/security/advisories/GHSA-5qvp-pr9f-2g2v
• https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version/commit/54b5784d89f36cd413a8bc5032ab0a96438dcae3
• https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version
• https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version/releases/tag/1.5.6

published 2026-04-01T20:52:20Z · modified 2026-04-01T21:04:43.804300Z · JSON