Skip to content

Commit

Permalink
fix: requirements.txt to reduce vulnerabilities (#281)
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6514866

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
  • Loading branch information
perdelt and snyk-bot committed Apr 4, 2024
1 parent e2f21a9 commit eb70352
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ HiYaPyCo==0.5.1
mistune>=2.0.3 # not directly required, pinned by Snyk to avoid a vulnerability
numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability
pillow>=10.3.0 # not directly required, pinned by Snyk to avoid a vulnerability
Werkzeug>=3.0.1
fonttools>=4.43.0 # not directly required, pinned by Snyk to avoid a vulnerability
dash>=2.15.0 # not directly required, pinned by Snyk to avoid a vulnerability
Expand Down

0 comments on commit eb70352

Please sign in to comment.