From a58c96d9af3d22507ca8634d58997ac2362d93f9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 26 Sep 2023 18:39:45 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878 --- requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index ac1a161c..61f9486a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,4 +8,5 @@ coverage==5.5 black==22.3 plotly==5.2.1 tqdm==4.50.0 -faker==13.3.3 \ No newline at end of file +faker==13.3.3 +pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file