From 731b99132aeca2a0aaf72412040e94d124d7ea73 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 30 Aug 2024 14:33:53 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6150717 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6809379 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-3319935 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-3319936 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6035177 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6808933 --- requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index cbcf5f10..b70c3835 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12,4 +12,5 @@ selenium-wire==4.2.0 certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability -Werkzeug==2.1.2 +Werkzeug==3.0.3 +jinja2>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability