fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-1055461 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-1055462
dhondta · Jan 6, 2021 · 703521d · 703521d
1 parent 0af0786
commit 703521d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -27,3 +27,4 @@ tqdm
 virtualenv
 weasyprint; python_version>='3.5'
 xmltodict
+pillow>=8.1.0 # not directly required, pinned by Snyk to avoid a vulnerability