From ecb803e51338010e07552a23528303c1b231d1c8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 23 Sep 2022 18:23:04 +0000 Subject: [PATCH] fix: requirements-to-freeze.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-3031740 --- requirements-to-freeze.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements-to-freeze.txt b/requirements-to-freeze.txt index 991e8590..ee0fffac 100644 --- a/requirements-to-freeze.txt +++ b/requirements-to-freeze.txt @@ -8,3 +8,4 @@ lxml pyquery requests soco +protobuf>=3.18.3 # not directly required, pinned by Snyk to avoid a vulnerability