From 0b104bbb7c7c4826164f742a86ade9c9752a5617 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 14 Nov 2022 18:39:32 +0000 Subject: [PATCH] fix: server/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3113904 --- server/requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/server/requirements.txt b/server/requirements.txt index 8440f7b..055d5cf 100644 --- a/server/requirements.txt +++ b/server/requirements.txt @@ -14,4 +14,5 @@ urllib3==1.25.3 Werkzeug==0.15.5 uuid==1.30 nltk==3.5 -spacy==2.2.4 \ No newline at end of file +spacy==2.2.4 +setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file