From 03a5950fba4dc376b69f6b3a9e9f238a43ccec3a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 2 Nov 2023 09:47:30 +0000 Subject: [PATCH] fix: api/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6041510 --- api/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/api/requirements.txt b/api/requirements.txt index 75256bf..e543090 100644 --- a/api/requirements.txt +++ b/api/requirements.txt @@ -11,5 +11,5 @@ pandas==1.0.4 python-dateutil==2.8.1 pytz==2020.1 six==1.15.0 -Werkzeug==2.2.3 +Werkzeug==3.0.1 pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability