From 67240a22647bcc505195f72905bf9d256f486a10 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 7 Sep 2021 21:50:47 -0700 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-FLASK-42185 - https://snyk.io/vuln/SNYK-PYTHON-FLASK-451637 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-174126 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-455616 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-1041750 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-40482 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-42069 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-458931 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-564338 --- requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements.txt b/requirements.txt index d56a228..e79d1a2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,12 +1,12 @@ blinker==1.4 coverage==4.0.2 -Flask==0.10.1 +Flask==0.12.3 Flask-Script==2.0.5 Flask-Testing==0.4.2 funcsigs==0.4 httplib2==0.9.2 itsdangerous==0.24 -Jinja2==2.8 +Jinja2==2.11.3 linecache2==1.0.0 MarkupSafe==0.23 mock==1.3.0 @@ -20,4 +20,4 @@ six==1.10.0 traceback2==1.4.0 twilio==6.9.0 unittest2==1.1.0 -Werkzeug==0.11.2 +Werkzeug==0.11.6