fix: pub_sub/python/sdk/order-processor-fastapi/requirements.txt to r…

…educe vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6645291
dapr · Apr 18, 2024 · 74db870 · 74db870
1 parent 6c1392a
commit 74db870
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pub_sub/python/sdk/order-processor-fastapi/requirements.txt b/pub_sub/python/sdk/order-processor-fastapi/requirements.txt
@@ -2,3 +2,4 @@ fastapi
 dapr-ext-fastapi-dev
 cloudevents
 uvicorn
+aiohttp>=3.9.4 # not directly required, pinned by Snyk to avoid a vulnerability