From 3873bb7f8da17e9995d1235b853aa8ac40b42375 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 21 Jan 2024 15:46:09 +0000 Subject: [PATCH] fix: backend/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918 --- backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index 6f2115e..06ed542 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -8,7 +8,7 @@ django-logentry-admin==1.0.4 djangorestframework==3.11.2 mysqlclient==1.3.12 pathlib==1.0.1 -Pillow==9.0.1 +Pillow==10.2.0 python-decouple==3.1 pytz==2017.3 six==1.11.0