From 743a02e084f2d6c0e06e8bc97430a1a393af227e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 5 Dec 2024 23:04:21 +0000 Subject: [PATCH] fix: requirements-dev.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-8456315 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-8456316 --- requirements-dev.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements-dev.txt b/requirements-dev.txt index 4b17b0c..948461e 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -3,3 +3,4 @@ django-nose==1.4 nose==1.3.6 msgpack-python==0.4.6 pyyaml==5.4 +django>=4.2.17 # not directly required, pinned by Snyk to avoid a vulnerability