Vulnerabilities in dependencies

[fxai]

$ pip-audit -r requirements.txt
Found 22 known vulnerabilities in 12 packages
Name               Version   ID                  Fix Versions
------------------ --------- ------------------- -------------
certifi            2023.7.22 PYSEC-2024-230      2024.7.4
cryptography       41.0.6    PYSEC-2024-225      42.0.4
cryptography       41.0.6    GHSA-3ww4-gg4f-jr7f 42.0.0
cryptography       41.0.6    GHSA-9v9h-cgj8-h64p 42.0.2
cryptography       41.0.6    GHSA-h4gh-qq45-vh27 43.0.1
flask-security     3.0.0     GHSA-cg8c-gc2j-2wf7
flask-security-too 5.0.2     PYSEC-2023-248      5.3.3
idna               3.4       PYSEC-2024-60       3.7
jinja2             3.1.3     GHSA-h75v-3vvj-5mfj 3.1.4
jinja2             3.1.3     GHSA-q2x7-8rv6-6q7h 3.1.5
jinja2             3.1.3     GHSA-gmj6-6f8f-6699 3.1.5
pydantic           1.10.11   GHSA-mr82-8j83-vxmv 1.10.13,2.4.0
pymongo            4.4.1     GHSA-m87m-mmvp-v9qm 4.6.3
requests           2.31.0    GHSA-9wx4-h78v-vm56 2.32.0
urllib3            2.0.4     PYSEC-2023-192      1.26.17,2.0.6
urllib3            2.0.4     PYSEC-2023-212      1.26.18,2.0.7
urllib3            2.0.4     GHSA-34jh-p97f-mpxf 1.26.19,2.2.2
werkzeug           2.3.6     PYSEC-2023-221      2.3.8,3.0.1
werkzeug           2.3.6     GHSA-2g68-c3qc-8985 3.0.3
werkzeug           2.3.6     GHSA-f9vj-2wh5-fj8j 3.0.6
werkzeug           2.3.6     GHSA-q34m-jh98-gwm2 3.0.6
gunicorn           20.1.0    GHSA-w3h3-4rj7-4ph4 22.0.0

[fxai]

i tried to update some of the dependencies. But main issue is flask-mongoengine which is a dead project.
Because of this we have to stick to Flask version 2.2.5, Werkzeug < 3.0.x and flask-security < 5.x

https://github.com/CompassSecurity/PurpleOps/tree/update-python-dependencies

$ pip-audit -r requirements.txt
Found 5 known vulnerabilities in 3 packages
Name               Version ID                  Fix Versions
------------------ ------- ------------------- ------------
flask-security     3.0.0   GHSA-cg8c-gc2j-2wf7
flask-security-too 5.0.2   PYSEC-2023-248      5.3.3
werkzeug           2.3.8   GHSA-2g68-c3qc-8985 3.0.3
werkzeug           2.3.8   GHSA-f9vj-2wh5-fj8j 3.0.6
werkzeug           2.3.8   GHSA-q34m-jh98-gwm2 3.0.6