From 2ba0e433bd475fd4fb9b1a07b7de949a48f25547 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 22 May 2026 03:47:12 +0000 Subject: [PATCH] fix: composer/workflows/requirements-composer.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-MARSHMALLOW-14550833 --- composer/workflows/requirements-composer.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/composer/workflows/requirements-composer.txt b/composer/workflows/requirements-composer.txt index 93d3e924ad7..58905dad56a 100644 --- a/composer/workflows/requirements-composer.txt +++ b/composer/workflows/requirements-composer.txt @@ -1 +1,2 @@ apache-airflow-backport-providers-google==2021.3.3 +marshmallow>=3.26.2 # not directly required, pinned by Snyk to avoid a vulnerability