6 Commits

Author SHA1 Message Date
Christian Krakau-Louis f230a4d9c2 fix: Dockerfile to reduce vulnerabilities (#14)
Build and Push Docker Image / build-and-push (push) Has been cancelled
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN12-SQLITE3-10753055
- https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690985
- https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690987
- https://snyk.io/vuln/SNYK-DEBIAN12-PERL-5489190
- https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690990

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
2026-05-17 14:51:06 +02:00
Christian Krakau-Louis b12ca085df fix: requirements.txt to reduce vulnerabilities (#16)
The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-14908843

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
2026-05-17 14:49:36 +02:00
Christian Krakau-Louis 804ec2f539 Merge pull request #15 from christianlouis/snyk-fix-5f4fe8a43316e4aae2123d91b39a82fc
[Snyk] Security upgrade python from 3.13.3-slim to 3.14.2-slim
2025-12-17 15:16:24 +01:00
snyk-bot db8e936c23 fix: Dockerfile to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN12-SQLITE3-10753055
- https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690985
- https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690987
- https://snyk.io/vuln/SNYK-DEBIAN12-PERL-5489190
- https://snyk.io/vuln/SNYK-DEBIAN12-SYSTEMD-10264074
2025-12-17 14:15:05 +00:00
Christian Krakau-Louis 69fc2ad301 Update Dockerfile 2025-05-15 15:48:56 +02:00
Christian Krakau-Louis 82c1b0e7dc Update requirements.txt 2025-05-15 15:47:55 +02:00
2 changed files with 6 additions and 5 deletions
+1 -1
View File
@@ -1,5 +1,5 @@
# Use an official Python runtime as a parent image
FROM python:3.9-slim
FROM python:3.14.2-slim
# Create a working directory
WORKDIR /app
+5 -4
View File
@@ -1,5 +1,6 @@
Flask==2.2.5
requests==2.32.2
reportlab==3.6.13
Faker==18.9.0
Flask>=2.2.5
requests>=2.32.2
reportlab>=3.6.13
Faker>=18.9.0
pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability
werkzeug>=3.1.5 # not directly required, pinned by Snyk to avoid a vulnerability