From c1056d159165dbc3d421ba524a66ef8d45246c18 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 2 Aug 2023 21:24:11 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-5813745 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-5813746 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-5813750 --- requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements.txt b/requirements.txt index d7713dfb..5d6e43ab 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12,3 +12,4 @@ qrcode==5.0.1 service_identity==14.0.0 git+https://git.torproject.org/stem.git@3eb59411781c4fa210979cb112b800c001a59f6c#egg=stem-1.5.4.dev1-py2.7 zope.interface==3.6.1 +cryptography>=41.0.3 # not directly required, pinned by Snyk to avoid a vulnerability