From 6e56870a126790bf489a6a21c5ec6b26da0b2ec2 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 5 Mar 2021 07:22:56 +0000
Subject: [PATCH] fix: web-requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-PYYAML-550022
- https://snyk.io/vuln/SNYK-PYTHON-PYYAML-559098
- https://snyk.io/vuln/SNYK-PYTHON-PYYAML-590151
---
 web-requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web-requirements.txt b/web-requirements.txt
index 4b9fc4c6..2b681ee4 100644
--- a/web-requirements.txt
+++ b/web-requirements.txt
@@ -38,7 +38,7 @@ pyrsistent==0.14.11
 python-dateutil==2.8.0
 python-levenshtein==0.12.0
 pytz==2019.3              # via flask-restful
-pyyaml==5.1
+pyyaml==5.2
 raven[flask]==6.10.0
 redis==3.3.11             # via flask-rq2, rq
 retrying==1.3.3