From 3997467eb8c0c402113cceae1b4cef79b2234fef Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 27 Jun 2025 00:02:16 +0000 Subject: [PATCH] fix: app/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-10364902 --- app/requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/app/requirements.txt b/app/requirements.txt index 83fb296..5974d66 100644 --- a/app/requirements.txt +++ b/app/requirements.txt @@ -8,3 +8,4 @@ typing-extensions==4.3.0 Werkzeug==2.1.2 zipp==3.8.1 mysql-connector-python==8.0.29 +protobuf>=4.25.8 # not directly required, pinned by Snyk to avoid a vulnerability