fix: requirements/base.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091621 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091622 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6209406 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6209407 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219984 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219986
LDO-CERT · Feb 22, 2024 · c4a394f · c4a394f
1 parent 2ddfe08
commit c4a394f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/requirements/base.txt b/requirements/base.txt
@@ -144,3 +144,4 @@ pymisp==2.4.184.2
 # https://github.com/python-ldap/python-ldap
 python-ldap==3.4.4
 django-auth-ldap==4.6.0
+aiohttp>=3.9.2 # not directly required, pinned by Snyk to avoid a vulnerability