From 3f8ecc2d39e705c8425922e8cd30aecf9fb71060 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 4 Nov 2023 02:54:31 +0000 Subject: [PATCH] fix: requirements/base.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904 --- requirements/base.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements/base.txt b/requirements/base.txt index 1d60d0d8..5dc020fe 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -1,7 +1,7 @@ # https://github.com/stub42/pytz pytz==2022.7 # https://github.com/python-pillow/Pillow -Pillow==9.3.0 +Pillow==10.0.0 # https://github.com/hynek/argon2_cffi argon2-cffi==21.3.0 # https://github.com/evansd/whitenoise