From b8f4e26decc273cf5a4f91947cd277ecadab65af Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 19 Dec 2025 08:29:08 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-14400977 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-14400978 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-14400979 --- requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 7dec50a..0d952cb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,4 +6,5 @@ itranslate==0.1.2 openai==0.24.0 streamlit==1.13.0 streamlit-quill==0.0.3 -youtube-dl==2021.12.17 \ No newline at end of file +youtube-dl==2021.12.17 +tornado>=6.5.3 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file