From 8207d2eba74da7bb8079ee8062e6595315b99911 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 31 Oct 2024 14:06:38 +0000 Subject: [PATCH] fix: utils/requirements.min.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219984 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219986 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6514866 --- utils/requirements.min.txt | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/utils/requirements.min.txt b/utils/requirements.min.txt index 81164e1..47b901f 100644 --- a/utils/requirements.min.txt +++ b/utils/requirements.min.txt @@ -23,4 +23,6 @@ gunicorn PyMySQL setuptools==65.5.1 biopython -reportlab \ No newline at end of file +reportlab +numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability +pillow>=10.3.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file