Skip to content
This repository has been archived by the owner on Jul 16, 2024. It is now read-only.

Commit

Permalink
fix: requirements/development.txt to reduce vulnerabilities
Browse files Browse the repository at this point in the history 
The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-FLASK-5490129
- https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6150717
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-3319935
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-3319936
  • Loading branch information
@snyk-bot
snyk-bot committed Jan 18, 2024
1 parent 2cd8054 commit 5003b17
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions requirements/development.txt
View file
Original file line number Diff line number Diff line change
Expand Up @@ -83,3 +83,6 @@ xlrd==2.0.1

# The following packages are considered to be unsafe in a requirements file:
# setuptools
flask>=2.2.5 # not directly required, pinned by Snyk to avoid a vulnerability
jinja2>=3.1.3 # not directly required, pinned by Snyk to avoid a vulnerability
werkzeug>=2.2.3 # not directly required, pinned by Snyk to avoid a vulnerability

0 comments on commit 5003b17

Please sign in to comment.