From 80f0c1ba250aae8ccf89af0615c94394e0ffd28d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 13 Jan 2026 05:58:18 +0000 Subject: [PATCH] fix: twitter-sentiment-processor/demos/py-demo/viewer/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871873 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871876 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871877 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871888 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871929 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871954 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871979 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14872000 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-14908843 --- .../demos/py-demo/viewer/requirements.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/twitter-sentiment-processor/demos/py-demo/viewer/requirements.txt b/twitter-sentiment-processor/demos/py-demo/viewer/requirements.txt index 883fd905..a874e8ee 100644 --- a/twitter-sentiment-processor/demos/py-demo/viewer/requirements.txt +++ b/twitter-sentiment-processor/demos/py-demo/viewer/requirements.txt @@ -2,3 +2,5 @@ dapr-ext-grpc >= 1.0.0 dapr >= 1.0.0 flask-socketio == 4.* flask >= 1.1.2 +aiohttp>=3.13.3 # not directly required, pinned by Snyk to avoid a vulnerability +werkzeug>=3.1.5 # not directly required, pinned by Snyk to avoid a vulnerability