From 78757564c881dad985dd6267286b2148d9b8ccf4 Mon Sep 17 00:00:00 2001
From: Akshay Joshi <akshay.joshi@enterprisedb.com>
Date: Thu, 25 Aug 2022 13:21:18 +0530
Subject: [PATCH] Pin Flask-SocketIO <= v5.2.0. The latest version does not
 support Werkzeug in production environments. Fixes #7641

---
 docs/en_US/release_notes_6_13.rst | 1 +
 requirements.txt                  | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/docs/en_US/release_notes_6_13.rst b/docs/en_US/release_notes_6_13.rst
index 9b8853716..70ca049a7 100644
--- a/docs/en_US/release_notes_6_13.rst
+++ b/docs/en_US/release_notes_6_13.rst
@@ -52,3 +52,4 @@ Bug fixes
   | `Issue #7630 <https://redmine.postgresql.org/issues/7630>`_ -  Ensure that If the trigger function definition is changed, drop and recreate the trigger in the schema diff.
   | `Issue #7632 <https://redmine.postgresql.org/issues/7632>`_ -  Fixed an issue where a user could not authenticate using Azure CLI on OSX.
   | `Issue #7633 <https://redmine.postgresql.org/issues/7633>`_ -  Ensure that the autofocus is on the input control for the master password and server password dialogs.
+  | `Issue #7641 <https://redmine.postgresql.org/issues/7641>`_ -  Pin Flask-SocketIO <= v5.2.0. The latest version does not support Werkzeug in production environments.
diff --git a/requirements.txt b/requirements.txt
index 22fa809ad..c42270821 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -20,7 +20,7 @@ Flask-Compress==1.*
 Flask-Paranoid==0.*
 Flask-Babel==2.*
 Flask-Security-Too==4.1.*
-Flask-SocketIO>=5.0.1
+Flask-SocketIO<=5.2.0
 WTForms==3.*
 passlib==1.*
 pytz==2021.*