From 9a5ce09effb333ff9d1b55e3510d6a5f3c450720 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 11 Jan 2026 07:11:18 +0000 Subject: [PATCH] fix: python/requirements-optional.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871873 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871876 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871877 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871888 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871929 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871954 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871979 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14872000 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210 --- python/requirements-optional.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/python/requirements-optional.txt b/python/requirements-optional.txt index d43d8be0a..520963b8f 100644 --- a/python/requirements-optional.txt +++ b/python/requirements-optional.txt @@ -2,3 +2,5 @@ hidapi >= 0.7.99.post20 web3 >= 4.8 Pillow stellar-sdk>=4.0.0,<6.0.0 +aiohttp>=3.13.3 # not directly required, pinned by Snyk to avoid a vulnerability +urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability