From cc344468fe78a6d485d1a02c021f97351fe06778 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 12 Jan 2026 05:49:31 +0000 Subject: [PATCH] fix: twitter-sentiment-processor/demos/py-demo/processor/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871873 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871876 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871877 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871888 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871929 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871954 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871979 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14872000 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210 --- .../demos/py-demo/processor/requirements.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/twitter-sentiment-processor/demos/py-demo/processor/requirements.txt b/twitter-sentiment-processor/demos/py-demo/processor/requirements.txt index 11b8e391..29a52db7 100644 --- a/twitter-sentiment-processor/demos/py-demo/processor/requirements.txt +++ b/twitter-sentiment-processor/demos/py-demo/processor/requirements.txt @@ -1,3 +1,5 @@ azure-ai-textanalytics >= 5.1.0b2 dapr-ext-grpc >= 1.0.0 dapr >= 1.0.0 +aiohttp>=3.13.3 # not directly required, pinned by Snyk to avoid a vulnerability +urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability