From 75c53e8beb7a46e52daf9156bbfd874a3311e40f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 6 May 2024 17:24:48 +0000 Subject: [PATCH] fix: requirements/development.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6808933 --- requirements/development.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements/development.txt b/requirements/development.txt index e398368e7a7c0..8445d247365b0 100644 --- a/requirements/development.txt +++ b/requirements/development.txt @@ -135,3 +135,4 @@ xlrd==2.0.1 # The following packages are considered to be unsafe in a requirements file: # setuptools +werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability