From b280376ae72d3a131f2bafd9283cd66668e93d42 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 7 May 2025 09:51:54 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-GEVENT-9919772 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-9964606 --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index b2330b7..b273021 100644 --- a/requirements.txt +++ b/requirements.txt @@ -3,7 +3,7 @@ bleach==5.0.1 cffi==1.15.1 Flask==2.2.5 Flask-Caching==2.0.2 -gevent==21.12.0 +gevent==25.4.1 html5lib==1.1 itsdangerous==2.1.2 Jinja2==3.1.2 @@ -12,4 +12,4 @@ misaka==2.1.1 pytest==7.4.1 pytest-cov==4.1.0 Werkzeug==2.3.6 -setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability +setuptools>=78.1.1 # not directly required, pinned by Snyk to avoid a vulnerability