cryptography to be upgraded >= 39.0.1, currently 3.4.7 - CVE link
starlette to be upgraded >= 0.25 - see issue