From e55f1a6e1808461596ed84dbcfe5ea1d592258b2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 24 Sep 2024 09:00:52 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-MKDOCS-1729735 - https://snyk.io/vuln/SNYK-PYTHON-MKDOCS-2438396 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-5537286 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-5840803 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-6041512 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-7217828 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-7217829 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 --- requirements.txt | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 991646b4..39084bcb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,7 @@ -mkdocs==1.0.4 +mkdocs==1.3.0 mkdocs-material==4.6.3 mkdocs-minify-plugin==0.2.3 pygments==2.6.1 pymdown-extensions==7.0 +tornado>=6.4.1 # not directly required, pinned by Snyk to avoid a vulnerability +zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability