From 452c6a794ba1dc09c123f1a4029f23c7d938f742 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 1 Aug 2024 05:02:17 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-3164749 - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-5805047 - https://snyk.io/vuln/SNYK-PYTHON-IDNA-6597975 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-5595532 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-1014645 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-1533435 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-559452 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-5926907 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-6002459 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 --- requirements.txt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/requirements.txt b/requirements.txt index de77a3863d..43a3982ebb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,7 +7,7 @@ azure-storage==0.36.0 boto3==1.9.232 botocore==1.12.232 cachetools==3.1.1 -certifi==2019.9.11 +certifi==2023.7.22 cffi==1.12.3 chardet==3.0.4 Click==7.0 @@ -35,7 +35,7 @@ google-cloud-storage==1.19.1 google-resumable-media==0.4.1 googleapis-common-protos==1.6.0 httplib2==0.18.0 -idna==2.8 +idna==3.7 inflection==0.3.1 iso8601==0.1.12 itsdangerous==1.1.0 @@ -58,7 +58,7 @@ PyJWT==1.7.1 python-dateutil==2.8.0 pytz==2019.2 PyYAML==5.1 -requests==2.22.0 +requests==2.32.2 requests-aws4auth==0.9 requests-http-signature==0.1.0 rsa==4.0 @@ -67,6 +67,6 @@ six==1.12.0 swagger-spec-validator==2.4.3 termcolor==1.1.0 uritemplate==3.0.0 -urllib3==1.25.5 +urllib3==1.26.19 Werkzeug==0.16.0 wrapt==1.11.2