From 6b490c0014142526dc92f012a30b26f2dffbb2f0 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 8 Feb 2023 17:36:36 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3172287 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3314966 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315324 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315328 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315331 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315452 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315972 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315975 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 36bd5df4f..a11555a81 100644 --- a/requirements.txt +++ b/requirements.txt @@ -30,7 +30,7 @@ yosai==0.3.2 zope.component==4.6 zope.interface==4.7.2 ijson==2.5.1 -cryptography==3.3.2 +cryptography==39.0.1 cpe==1.2.1 itsdangerous==2.0.1 Jinja2==3.0.3