fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548181 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548987 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250
mongulu-cm · Dec 28, 2024 · bfa4ad2 · bfa4ad2
1 parent c129892
commit bfa4ad2
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -13,3 +13,4 @@ certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerabil
 requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability
 urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability
 Werkzeug==2.1.2
+jinja2>=3.1.5 # not directly required, pinned by Snyk to avoid a vulnerability