From 11b1220fae8787825f0521c2356985a43f00ac67 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 6 May 2024 17:36:07 +0000 Subject: [PATCH] fix: requirements/requirements_server.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6808933 - https://snyk.io/vuln/SNYK-PYTHON-WHEEL-3180413 --- requirements/requirements_server.txt | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/requirements/requirements_server.txt b/requirements/requirements_server.txt index afe5372..a946eb9 100644 --- a/requirements/requirements_server.txt +++ b/requirements/requirements_server.txt @@ -20,4 +20,6 @@ pyfiglet schedule PyGithub msal -pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file +pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability +werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability +wheel>=0.38.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file