Skip to content

Commit

Permalink
fix: requirements.txt to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250
  • Loading branch information
snyk-bot committed Sep 23, 2024
1 parent 2e739a4 commit c9f2b11
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -89,3 +89,4 @@ xmltodict==0.10.2
yamllint==1.15.0

#pyyaml>=5.4 # not directly required, pinned by Snyk to avoid a vulnerability. update: this breaks Python 3.5 build where this requirement is not found
urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability

0 comments on commit c9f2b11

Please sign in to comment.