From 527d9905bd9f000fe221725ca8f5da894d38de7b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 27 Oct 2024 19:34:18 +0000 Subject: [PATCH] fix: py3_test_requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-8309091 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-8309092 --- py3_test_requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/py3_test_requirements.txt b/py3_test_requirements.txt index 80c7b64..3039fa4 100644 --- a/py3_test_requirements.txt +++ b/py3_test_requirements.txt @@ -9,3 +9,4 @@ mock==1.0.1 # git+https://github.com/spulec/moto.git@0.4.23#egg=moto moto==3.1.19 -e . +werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability