From e0d24d894be72585c0c33d049e06d2d69d91aebe Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 26 Oct 2023 16:34:56 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6036192 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6035177 --- requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index c8eaa9a..1d51bf9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,5 @@ celery==5.0.0 -cryptography==3.4.6 +cryptography==41.0.5 Flask==1.1.2 gunicorn==20.0.4 jira==2.0.0 @@ -8,3 +8,4 @@ PyGithub==1.53 redis==3.5.3 requests==2.25.0 unidiff==0.6.0 +werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability