From acc3b48d1eb1e332d073d1c8ae97dd2732f73403 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 7 Jan 2025 12:18:10 +0000 Subject: [PATCH] fix: requirments.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-7886970 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 --- requirments.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirments.txt b/requirments.txt index 2b93af8..557ff4d 100644 --- a/requirments.txt +++ b/requirments.txt @@ -3,7 +3,7 @@ beautifulsoup4==4.12.3 boto3==1.34.153 botocore==1.34.153 cloudflare==2.20.0 -cryptography==43.0.0 +cryptography==43.0.1 cffi Django==4.2.14 docker==7.1.0 @@ -30,3 +30,4 @@ tldextract==5.1.2 tornado==6.4.1 validators==0.33.0 websocket-client==1.8.0 +zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability