From 070dbb6131657cf68bdb173a75929a260b2ca747 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 31 Mar 2025 07:00:18 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918 --- requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements.txt b/requirements.txt index 723e677..1b0f8f8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,3 +2,4 @@ Flask==2.2.5 requests==2.32.2 reportlab==3.6.13 Faker==18.9.0 +pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability