From 9625b1c965d8cb3ad27ed0e29861ce46e99f5f64 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 24 Mar 2024 01:49:29 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-1079232 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-1584144 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-5798483 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6057352 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6057353 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091621 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091622 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091623 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6209406 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6209407 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-174126 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6150717 --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index be6ed8d..e500c22 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,6 +1,6 @@ aiohttp-jinja2==1.1.0 aiohttp-session==2.7.0 -aiohttp==3.5.3 +aiohttp==3.9.2 aiopg==0.15.0 aioredis==1.2.0 async-timeout==3.0.1 # via aiohttp, aioredis @@ -8,7 +8,7 @@ attrs==18.2.0 # via aiohttp chardet==3.0.4 # via aiohttp hiredis==0.3.1 # via aioredis idna==2.8 # via yarl -jinja2==2.10 # via aiohttp-jinja2 +jinja2==3.1.3 # via aiohttp-jinja2 markupsafe==1.1.0 # via jinja2 multidict==4.5.2 # via aiohttp, yarl psycopg2==2.7.6.1 # via aiopg