Dependency Conflict Between Promptflow-Devkit and Vulnerable Flask-CORS Package

[NeethithevanR]

I am using the latest version of the promptflow package, which internally uses the promptflow-devkit (version 1.50.0). This promptflow-devkit package depends on another package called Flask-CORS (version 4.0.2), which has a known vulnerability. The recommended remediation is to use the latest version of Flask-CORS (version 5.0.0). However, when I update to this version, promptflow-devkit no longer works. Please look into this issue.