From 372a3c0df60aee317616a2cc90fdeae35d074ab3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 21 Nov 2024 20:05:49 +0000 Subject: [PATCH] fix: djangoserver/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-8383923 --- djangoserver/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/djangoserver/requirements.txt b/djangoserver/requirements.txt index 435b912..17c9901 100644 --- a/djangoserver/requirements.txt +++ b/djangoserver/requirements.txt @@ -8,7 +8,7 @@ torch==2.0.0 transformers==4.36.0 django-cors-headers==3.14.0 pyarrow>=14.0.1 # not directly required, pinned by Snyk to avoid a vulnerability -aiohttp>=3.10.2 # not directly required, pinned by Snyk to avoid a vulnerability +aiohttp>=3.10.11 # not directly required, pinned by Snyk to avoid a vulnerability setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability sqlparse>=0.5.0 # not directly required, pinned by Snyk to avoid a vulnerability requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability