From 97fdbbb5bc664e5e0d70f23ace748a25eb0e31fb Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 19 Dec 2025 11:23:29 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-FILELOCK-14458335 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-14400977 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-14400978 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-14400979 --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index f311b53..eeb09ed 100644 --- a/requirements.txt +++ b/requirements.txt @@ -21,7 +21,7 @@ distlib==0.3.1 dnspython==1.16.0 docutils==0.16 entrypoints==0.3 -filelock==3.0.12 +filelock==3.20.1 flake8==3.7.9 Flask-PyMongo==2.2.0 helpdev==0.6.10 @@ -214,7 +214,7 @@ spyder==4.0.1 spyder-kernels==1.8.1 terminado==0.8.3 testpath==0.4.4 -tornado==6.0.3 +tornado==6.5.3 traitlets==4.3.3 ujson==5.4.0 urllib3==1.26.5