From 658a095dbf6aaa4156120c33f65da27bfb422dce Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 3 Jan 2021 02:52:57 +0000 Subject: [PATCH] fix: cluster/juju/charms/trusty/kubernetes/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PYYAML-42159 - https://snyk.io/vuln/SNYK-PYTHON-PYYAML-559098 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-72435 --- cluster/juju/charms/trusty/kubernetes/requirements.txt | 3 +++ 1 file changed, 3 insertions(+) diff --git a/cluster/juju/charms/trusty/kubernetes/requirements.txt b/cluster/juju/charms/trusty/kubernetes/requirements.txt index aaf7acb899671..ecf4946731fb7 100644 --- a/cluster/juju/charms/trusty/kubernetes/requirements.txt +++ b/cluster/juju/charms/trusty/kubernetes/requirements.txt @@ -2,3 +2,6 @@ flake8 pytest bundletester path.py + +pyyaml>=4.2b1 # not directly required, pinned by Snyk to avoid a vulnerability +requests>=2.20 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file