From 170aca68d20e899367351e42e837a94a41a094f7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 3 Nov 2023 15:06:11 +0000 Subject: [PATCH] fix: requirement.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904 --- requirement.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirement.txt b/requirement.txt index 4787294..222f1e0 100644 --- a/requirement.txt +++ b/requirement.txt @@ -1,5 +1,5 @@ sphinx_rtd_theme rst2pdf svglib -pillow>=8.3.2 # not directly required, pinned by Snyk to avoid a vulnerability +pillow>=10.0.0 # not directly required, pinned by Snyk to avoid a vulnerability setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file