From c9ffbce70b8adb29454cff19bb08b3bf1d09eaaa Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 28 Nov 2023 15:33:00 +0000 Subject: [PATCH] fix: app/requirements-step-2.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091621 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091622 --- app/requirements-step-2.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/app/requirements-step-2.txt b/app/requirements-step-2.txt index 625ab94e..b34806b4 100644 --- a/app/requirements-step-2.txt +++ b/app/requirements-step-2.txt @@ -17,3 +17,4 @@ newtulipy matplotlib>=3.0.1 scipy>=1.1.0 numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability +aiohttp>=3.9.0 # not directly required, pinned by Snyk to avoid a vulnerability