fix: pub_sub/python/sdk/order-processor-fastapi/requirements.txt to r…

…educe vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6808823
dapr · May 5, 2024 · 81e13af · 81e13af
1 parent 6c1392a
commit 81e13af
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pub_sub/python/sdk/order-processor-fastapi/requirements.txt b/pub_sub/python/sdk/order-processor-fastapi/requirements.txt
@@ -2,3 +2,4 @@ fastapi
 dapr-ext-fastapi-dev
 cloudevents
 uvicorn
+aiohttp>=3.9.4 # not directly required, pinned by Snyk to avoid a vulnerability