From 189648efdf2b409d85c7911d8f3df4ba28caa2b9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 6 Apr 2022 16:45:58 +0000 Subject: [PATCH] fix: deploy/pyenv/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-174126 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-458931 --- deploy/pyenv/requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/deploy/pyenv/requirements.txt b/deploy/pyenv/requirements.txt index 70aae29..9d6815d 100644 --- a/deploy/pyenv/requirements.txt +++ b/deploy/pyenv/requirements.txt @@ -9,7 +9,7 @@ gunicorn==19.9.0 huey==1.10.2 idna==2.7 itsdangerous==0.24 -Jinja2==2.10 +Jinja2==2.11.3 MarkupSafe==1.0 psutil==5.4.7 PyGithub==1.43.2 @@ -22,5 +22,5 @@ requests-file==1.4.3 six==1.11.0 tldextract==2.2.0 urllib3==1.23 -Werkzeug==0.14.1 +Werkzeug==0.15.3 wrapt==1.10.11