From 879f6f17a66be724b6c8e6b469318cfce27e4957 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 2 Feb 2024 03:18:50 +0000 Subject: [PATCH] fix: requirements/requirements_writers.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219984 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219986 --- requirements/requirements_writers.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements/requirements_writers.txt b/requirements/requirements_writers.txt index 2c9cd3af..f461f1a0 100644 --- a/requirements/requirements_writers.txt +++ b/requirements/requirements_writers.txt @@ -1,7 +1,7 @@ matplotlib numpy pandas -pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability +pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability scikit-learn sorcery tornado>=6.3.3 # not directly required, pinned by Snyk to avoid a vulnerability