From d267a499c3ca4154a66c6b1cd08baac0e92c70ca Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 1 Feb 2026 08:16:43 +0000 Subject: [PATCH] fix: python/requirements-optional.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-15090738 --- python/requirements-optional.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/python/requirements-optional.txt b/python/requirements-optional.txt index d43d8be0a..ac93ba385 100644 --- a/python/requirements-optional.txt +++ b/python/requirements-optional.txt @@ -2,3 +2,4 @@ hidapi >= 0.7.99.post20 web3 >= 4.8 Pillow stellar-sdk>=4.0.0,<6.0.0 +protobuf>=6.33.5 # not directly required, pinned by Snyk to avoid a vulnerability