ASFHyP3 · jtherrmann · Sep 4, 2024 · Jul 22, 2024 · Jul 22, 2024 · Jul 22, 2024
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [PEP 440](https://www.python.org/dev/peps/pep-0440/) 
 and uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.2]
+### Fixed
+- Upgraded to flask-cors v5.0.0 from v4.0.1. Resolves [CVE-2024-6221](https://www.cve.org/CVERecord?id=CVE-2024-6221).
+
 ## [0.1.1]
 ### Changed
 - Upgrade the API Lambda runtime from Python 3.8 to 3.12. This Python version pin was overlooked during the previous release.

diff --git a/requirements-all.txt b/requirements-all.txt
@@ -1,13 +1,13 @@
-boto3==1.34.140
-cfn-lint==1.5.0
-flake8==7.1.0
+boto3==1.35.10
+cfn-lint==1.12.1
+flake8==7.1.1
 flake8-blind-except==0.2.1
 flake8-builtins==2.5.0
 flake8-import-order==0.18.2
-pytest==8.2.2
-moto==5.0.11
+pytest==8.3.2
+moto==5.0.13
 responses==0.25.3
-pyYAML==6.0.1
+pyYAML==6.0.2
 -r requirements-find-new.txt
 -r requirements-api.txt
 -r requirements-harvest-products.txt
diff --git a/requirements-api.txt b/requirements-api.txt
@@ -1,4 +1,4 @@
 flask==3.0.3
-Flask-Cors==4.0.1
+Flask-Cors==5.0.0
 serverless_wsgi==3.0.4
 ./database
diff --git a/requirements-find-new.txt b/requirements-find-new.txt
@@ -1,5 +1,5 @@
-asf-search==7.1.3
-hyp3-sdk==6.1.0
+asf-search==8.0.1
+hyp3-sdk==7.0.1
 python-dateutil==2.9.0.post0
 requests==2.32.3
 ./database
diff --git a/requirements-harvest-products.txt b/requirements-harvest-products.txt
@@ -1,3 +1,3 @@
-hyp3-sdk==6.1.0
+hyp3-sdk==7.0.1
 requests==2.32.3
 ./database