From de2bf900b91eb9ccc62f74430ec5a4bbc441e713 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 16 Oct 2022 17:53:11 +0000 Subject: [PATCH] fix: requirements-to-freeze.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-3031740 - https://snyk.io/vuln/SNYK-PYTHON-RSA-1038401 --- requirements-to-freeze.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/requirements-to-freeze.txt b/requirements-to-freeze.txt index 991e8590..e139afe2 100644 --- a/requirements-to-freeze.txt +++ b/requirements-to-freeze.txt @@ -8,3 +8,5 @@ lxml pyquery requests soco +protobuf>=3.18.3 # not directly required, pinned by Snyk to avoid a vulnerability +rsa>=4.7 # not directly required, pinned by Snyk to avoid a vulnerability